If any program could run any instruction, one buggy app could switch off interrupts or read another program's memory and bring the machine down. The hardware mode bit stops that by allowing privileged instructions only in kernel mode. Think of it whenever a question asks why a program cannot do something directly, like talking to a device. The only way in is a controlled door, a system call, trap or interrupt, never setting the bit yourself.