- How safe are installed & genuine-vendor signed old drivers, specifically when attackers are spoofing Microsoft and other vendor certificates?
- On older PCs and laptops where some components are no longer recognized by Windows Device Manager since Microsoft removes older drivers from their catalog periodically. Does this expose the device to attacks via the said component?
- When driver is available for said old component, but you don't essentially need that component (RST, Intel ME, DriveGuard, any XYZ old tech). Is having no driver safer than installing old driver?
This is a multi-faceted question (ignoring the fact that old device hardware example CPUs with Spectre, Meltdown etc. are themselves vulnerable) hence requesting understanding of various risks at play.