2.1 Reasons


Application Softwares are not trustworthy
more and more complicate implementation

Kernel is not trustworthy 
system call can be intercepted

Access Control is not perfect
Root(superuser) can do anything