Almost all the bad things you’re worried about don’t require an elevated token. I’m much more worried about someone stealing my data, installing a trojan, etc. (none of which require elevation) than installing a device driver (which does).
This obsession with not running as root/using UAC is just cargo cult security for single user systems.
This obsession with not running as root/using UAC is just cargo cult security for single user systems.