Why can't BPF be used to inject malicious code into the kernel? BPF bytecode can only read data, not write BPF bytecode is restricted in its functionality BPF bytecode runs in a user process, unable to access the kernel BPF bytecode runs only in the kernel and thus cannot affect user processes A verifier checks all BPF bytecode