Comment on A Steam vulnerability (0-Day) on Windows lets any normal user silently escalate to full SYSTEM privileges
It probably doesn’t need to, but windows doesn’t make it easy for services to drop privileges.