You're absolutely right but I was making the point that there's demonstrably no significant downsides to running driver/kernel code in less privileged mode, rather than Ring 0.