I'm a bit confused by the privilege escalation part. Doesn't modifying the settings require the same privileges the application has?