Comment by amluto

And, for some utterly and completely absurd reason, CUPS runs as a system daemon instead of a highly sandboxed user program.