The alternative architecture would be a micro kernal (Minux3) that can re-start OS level services. In Minux, if a low level driver stops working, it can be restarted ... almost like it was a service.
This could potentially provide a very strong defense against this type of attack by regularly restarting drivers and or services.
Ive never needed AV in Mac OSX or Linux. Malware is so rare its not worth the bother of installing security software.
I suspect so. OTOH, converting a monolithic arch into a microkernal arch is a staggering undertaking.
I taught some college seminars using MINIX 30 years ago, and was very impressed with the OS. But despite its beauty and technical advantages, it hasn't quite set the world on fire in those 30 years since, and I doubt it will. At least for the foreseeable future, we're stuck with what we have, and have to protect it as-is.