Sorry DKMS. nvidia distributes closed source .o files and most distributes have dkms packages to build those for each kernel.

> Would you prefer if Linux allowed local users to replace the kernel and/or its modules without root? What kind of faux-outrage is this?

On any Linux distribution, which managed packages update themselves? zero. Crowdstrike should provide package repositories so admins can pull in updates at their regular cadence.

At a minimum, the package should NEVER update its own binaries located in /usr/bin or /opt. If it need to pull updates, those should go in /var. Crowdstrike could have made the core binaries a shim where they load a second stage from /var.