Crowdstrike also managed to take down a bunch of Debian boxes not too long ago - this is not a Windows problem, this is a problem with a vendor product auto deploying bad kernel modules.
It’s actually a problem with the implementor allowing software to update itself blindly like this. I’d never enable “auto-update” in critical infrastructure. Completely laughable minor league move.