Usually no, at least not out of the box. If you don't sandbox your desktop applications, it is just not safe by principle. You are running binaries using the s

Usually no, at least not out of the box. If you don't sandbox your desktop applications, it is just not safe by principle. You are running binaries using the same user account with zero audit into what it is doing. You need access control.