[monocasa]

Device Manager only handles kernel drivers. Best practice is to put as much as possible into a highly privileged, but still user mode process so it can crash without bluescreening your system. If you assume that this code can crash (hence why it was delegated to user mode in the first place) it makes sense to code in a resurrection capability.

[zaphirplane]

Windows services have a restart if I crash mode, why wouldn’t that be used instead. This seems about making sure the user can’t stop it from starting

[monocasa]

It's a huge pain on the ass to setup right. Soft faults where the process is still running but is deadlocked don't get restarted for instance.

[zaphirplane]

Same problem if you write your own supervisor except you are writing a process supervisor

[monocasa]

Well, no, because you can write your supervisor in a way that does protect against that. In fact that's hat they're doing here.