You still want priv escalation if you're trying to spy on someone. The content process can't see anything you're doing in other apps, and the browser can only a

You still want priv escalation if you're trying to spy on someone. The content process can't see anything you're doing in other apps, and the browser can only access a very restricted view of the storage Living in memory or living off the land is generally a good idea, but you still want a chain of exploits anyways