This is about process privilege. Apps and services are a layer above.