> One can't expect that every driver package submission from every vendor is thoroughly vetted every time, this is a matter of trust and respect.

If you're going to allow 3rd parties to install software on potentially billions of computers with far reaching privileges then you better have something in place other than 'just trust me bro'.