> but serious people didn't expect the kernel to be a boundary for a sophisticated attacker.

I think it has more to do with what's on each side of the boundary in practice, a la https://xkcd.com/1200/ .