If a software is compromised to allow remote code execution, then the situation is pretty dire even without elevated privileges.

Basically your entire userspace will be compromised, and in terms of personal computing that is pretty much all you can lose.