According to https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/vhf, it can be used for both kernel mode and user mode drivers. As I understand it, the user mode driver doesn't require signing or disabling the secure boot. It would be useful to have this driver implemented in user mode instead of kernel mode.