Windows 11 Best — Trusted Installer

If an administrator changes the permissions of the Windows directory to allow "Full Control" for the Everyone group or Administrators , they effectively create a massive security hole. Malware that manages to bypass User Account Control (UAC) would then have unrestricted access to modify the OS kernel or system executables.

Why is this so hard?