Re: Security questions...
The first point is already impossible to meet. The nvidia driver must be a loadable module and can't be linked into the kernel. License wise it would also not be legal since the kernel module is not licensed under the GPL.
I can't comment on the second and third points.