> I'm sure they have a good reason to do it that way but why run a privileged process when per-user processes could do the job just fine? I actually don't know

> I'm sure they have a good reason to do it that way but why run a privileged process when per-user processes could do the job just fine? I actually don't know. I was thinking the same thing. Hopefully they have a good reason, because you're right about the attack surface issue.