Does Apple have a better method for preventing something like that?

I love my Mac, but I've had crashes that I suspect were caused by an application.

They have sunset third party kext files. That means if the kern crashes, it is Apple's fault.

I once did a little MacOS driver development and had a kext signing key. It was an unforgiving, poorly-documented environment. Good riddance.

TY

Large corporations buy Windows _because_ they can have this level of control over their machines. The CTOs and auditors want to be able to say they've personally secured their systems using "top of the line" security software.