> If you run as a user who doesn't have admin access you should be protected,

That's not very reassuring. Privilege escalation on Windows is a well studied subject:

https://github.com/swisskyrepo/PayloadsAllTheThings/blob/mas...