Does the updater need to run as root, though? They could install a launchd process running as the installing user who owns the /Applications folder. This is wha

Does the updater need to run as root, though? They could install a launchd process running as the installing user who owns the /Applications folder. This is what everything else does -- privileged helper daemons are not common.