Uh no, they would obviously make it so only kernel code can run that, like many other such settings.

And if an attacker can run code at the kernel level it's a non issue, as they're already on the other side of the airtight hatchway anyway [1]: they're in control of the computer and the memory.

[1]: https://blogs.msdn.microsoft.com/oldnewthing/20060508-22/?p=...