Microsoft has discussed the possibility of creating user mode APIs for the monitoring that security programs like CrowdStrike could utilize instead of installing a kernel mode driver, but they haven’t said anything about locking down kernel mode drivers and I personally doubt they ever would.

IIRC it is possible to disable the indicators altogether, although that may or may not be an acceptable solution to you. For me it was worth the trade-off because of exactly this reason.