90% of web users are on Windows, where there is no sudo. Malicious add-ons make money by injecting ads, overriding default search engine settings, capturing login credentials or even local files, or installing zombie spam relays. sudo is unnecessary for these attacks. How does one make money with sudo?<p>And as for locking down sudo, OS X is now &quot;rootless&quot; (System Integrity Protection) by default, preventing even sudo access from modifying some system settings.