Why is that so crazy? A driver is nothing more than a piece of program. Who only has access to Ring 0 from Windows…
So if there is a programming error in it (buffer overflow for example, or something else) it can just as well pose a risk.
There is a nice saying: where you work, mistakes are made. People who work little make few mistakes. I know people who make no mistakes at all…
Programmers, of drivers and of other software, are human beings and can therefore make mistakes.
–