Microsoft Proposes "Hornet" Security Module For The Linux Kernel

eBPF started as simple networking firewall but now it's growing into corporate spy on users product so microsoft can create and start selling microsoft linux as an option for their corporate customers, probably because there is huge demand. Hornet itself is kind of DRM backdoor / MITM to existing kernel that checks if you're allowed to run this program but can also allow to run 3-rd party programs user can't remove in the future.

That's how I understand it from briefly looking at source code and reading article and comments. Maybe I'm wrong as I'm not profficient in linux kernel and only briefly know the eBPF history.