If it ran in user mode that meant any other program - including viruses - could easily tamper with it. Besides, antivirus software that ran in user mode couldn’t prevent boot time viruses.

Of course your operating system vendor will always have access to kernel and increased permissions to do things that other software won’t have.