There's still the UAC prompt which should help mitigate risk, plus it's locked behind developer settings.