[insanitybit]

No, it's because the malware would have direct access to the (privileged) Linux Kernel via system calls.