The zig windows NT implementations are very well done and I actually use them as reference when dealing with windows IO.
Microsoft breaking the ntdll.dll function interface is extremely unlikely, there's too much popular software in the wild depending on it.
> > Won't this get flagged by anti-virus scanners as suspicious?
> Unfortunately, yes. We consider this a problem for the anti-virus scanners to solve.
I am suddenly less interested in relying on Zig.
Zig's decision here means the problem is _yours_ to convince this third party to trust you.