I sometimes think that iTunes requires admin-level privs to run so that Apple can force competing OSes to run less securely.