True in principle, while in the real world the devs didn't even inspect perms on those files or changed them deliberately to fix some access control issue without a second thought. Welcome to embedded software, where the product is ready when it passes the functional tests.

In related news, I have seen at least two proprietary drivers which allowed userspace libraries to program the hardware without any kernel oversight, incuding things like DMA engines. Pointed it out to one vendor; "yeah, we guess it's not ideal, but you know, details of the hardware is our secret sauce and customers demand no binaries in the kernel because reasons, blah blah".

I assume many of those embedded OpenGL implementations may work that way. Anyone with evidence to the contrary?