An educated guess says the TALPA folks got caught on "patently bad design taste" mixed with a dose of "we don't need no steenkin' Windows virus checkers" prejudice. I don't agree with the latter objection. Half of TALPA is just another security module, and there's plenty of those. But regarding design taste, using getsockopt() to read an event queue is asking for criticism on taste alone, and distracts from the important design issues. It shows gross unfamiliarity with unix/Linux culture, which can't be helped but it's a hurdle they'll have to overcome. Aesthetics and taste play an important part.