Exactly. A program running as the user can change the user's desktop configuration to launch a hacked browser instead of the browser installed by the system.

Exactly. A program running as the user can change the user's desktop configuration to launch a hacked browser instead of the browser installed by the system. It can also edit PATH and then wrap sudo and get root access the next time you use it, or fuck with you a thousand other ways.