Replying to @ariadne@social.treehouse.systems
"unprivileged? ring 0?"
yes. from the *platform* perspective, ring 0 is still user-controlled code, and thus must be considered by the platform to be unprivileged code, even if it has more privilege than rings greater than 0 (e.g. ring 3 userspace).
the *platform* must consider the ring0 kernel to be adversarial.

