Funny thing is that NT originally had video drivers in user space exactly for security/stability reasons, but moved it into kernel space with NT4 for performance reasons.