Code executed by user can do what user can do. What is the point you are trying to make?

Yes, of course there are still users out there that execute all software under the same account.

Inability to use the tools at hand to protect your data is not a technical issue.