I mean, most users don't root-install, but anyway the GUI application can drop a different age binary higher on the user's PATH. Or change their shell. Or a million other things.
There really isn't a point to defending against code running unsandboxed on a single-user machine.
There really isn't a point to defending against code running unsandboxed on a single-user machine.