A command running in my usual shell context can just change my dotfiles to do whatever it wanted anyway. There's little value these days in the traditional root

A command running in my usual shell context can just change my dotfiles to do whatever it wanted anyway. There's little value these days in the traditional root-user separation. You don't actually need "admin rights" to do practically anything malware might want to do.