There are two problems with that approach: 1) while this might stop ransomware as we know it, it does not fix the underlying problem, e.g. usually all the im

There are two problems with that approach: 1) while this might stop ransomware as we know it, it does not fix the underlying problem, e.g. usually all the important files are in the "regular folder" anyway, so even if adversaries wouldn't be able to delete them, they still can steal them 2) privescs are cheap and abundant, which makes all localhost-based protection mechanisms trivial to bypass