I believe the .pkg installer usually asks for a password and runs privileged, while moving the app only uses root privilege to move the bundle, but never execut

I believe the .pkg installer usually asks for a password and runs privileged, while moving the app only uses root privilege to move the bundle, but never executes any external code it’s privileges? I’m not sure how relevant the difference is considering most valuable data is owned by the user, but also because MacOS has evolved the security model well beyond the UnIX standard.