Moving Defender to user space is a requirement to lock down windows from a fair competition perspective.
Microsoft is currently blaming the EU commission for not allowing them locking down Windows, compare https://www.telegraph.co.uk/business/2024/07/22/microsoft-bl...