Does Mac OS have an ebpf API like Linux has, or would a similar crowdstrike bug kill a Mac as well? The issue is that windows doesn't really have a way to do this without a kernel driver, which can take the whole system down if there's a bug.
This API allows for security applications to monitor for potentially malicious behaviors. As it is part of the System Extension and DriverKit, it shouldnโt crash the system kernelโฆ but you do need to request for entitlement from Apple to build apps using that API (honestly probably a good thing, prevents spywares using it to spy on people).
Seems like windows really is behind when it comes to this then, if everyone else has a proper solution. Still, I feel this is more on crowdstrike than Microsoft. For whatever reason they didn't have the right processes in place to avoid pushing bad code.
Unfortunately, even though you (or me) may not, some random person/company (that we rely on) probably is. And, when they go down, we are coming along no matter what.