Since FUSD drivers run in their own process space, the rest of the system is protected from them. A buggy or malicious FUSD driver, at the very worst, can only corrupt itself. It's not possible for it to corrupt the kernel, other FUSD drivers, or even the processes that are using its devices. In contrast, a buggy kernel module can bring down any process in the system, or the entire kernel itself.