@marcan isn't that the definition of av/endpoint security software?
Other than the non memory safe language bit, it has to work that way, with the incentives all around keeping it that way.
(I'm still amused (?) that ms gets to sell security for software it sells, separately, by monthly subscription)