...which by default allows the installation of printer drivers, unless specifically restricted via registry settings, LPO or GPO.

Code:

Secure Print Driver Installation
To restrict print driver installation to Administrators and Print Operators, use Registry Editor to create or assign the following Registry key value: 

Hive:	HKEY_LOCAL_MACHINE\SYSTEM
Key:	\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers
Name:	AddPrinterDrivers
Type:	REG_SZ
Value:	1
_________________________
There are two types of vessels, submarines and targets.