Wait that can't be correct. What about software drivers? What if you wanna control the behavior of hardware remotely? Or are you referring to something more specific then that stuff?
You need to limit the functionality available to userspace so that it can not be used to break kernel security.
Any drivers that need functionality that could also be used to attack the kernel are now simply banned. This is the main reason for why modern windows versions had some hardware support issues.
