On Windows you need to explicitly install a malicious driver (which in turn requires to you to disable signature verification)

Not to be contrarian, but hackers have signed malicious code with compromised Microsoft driver certificates, so it’s not out of the question that it could be snuck in without having to turn off signing.