@Mustafa to the second point, one shouldn’t be able to uninstall osquery without admin credentials on the machine, which is the only guarantee of tamper prevention we make