.. and if those processes come from different vendors, then you effectively have 100 different admins and one user. This is the prevailing situation on mobile devices, where the priority is protecting the single user from potentially malicious vendors.