Security agents can become privileged attack surfaces

The software installed everywhere, running with deep privilege and updating automatically, is a powerful thing to compromise.

That description covers most security tooling. It has kernel access, reaches every machine and is trusted by design. Vulnerabilities in it are correspondingly serious, and the CrowdStrike outage showed the same properties producing global impact without any attacker at all.