But it prevents doing what you just said above :

> Developers can ask users for their admin password, sudo to root and largely do whatever they want including adding kernel extensions and drivers.