Comment by dangus

And then for the attacker to do anything damaging to the computer they need to trick you into revealing your sudo/admin password, right?

On a default Unix-like desktop shell you can’t really do much permanent harm without elevating your permissions.