From their own article it sounds like they wanted to pursue adding more user-mode security features, which I am interpreting as trying to make it so that such software doesn't need kernel mode anymore: blogs.windows.com/windowsexper...

Taking steps that drive resiliency and security for Windows customers

On Tuesday, Sept. 10, we hosted the Windows Endpoint Security Ecosystem Summit. This forum brought together a diverse group of endpoint security vendors and government officials from the U.S. and Euro...

From the blog post, they are looking at providing additional security measures that can work outside of kernel-mode, while making sure that companies that do use kernel-mode aren't going to screw things up as badly.