Was it ever considered for Longhorn to change this? To add memory protection to kernel mode code?
No. But we are going to make it easier for kernel mode driver developers to write better code. Stay tuned...
Or is the performance penalty so high that it is impossible?
Nothing is impossible, my friend.