Are we, though? If I run an application as a normal user on Windows, it will run with my user account's privileges. And even if Microsoft put special care into the permissions on the database file—it's not like your typical Windows user wouldn't carelessly accept any UAC dialog they are presented with…