My uncle wasn’t the admin of his (Windows) computer, but he managed to install a web browser that was basically malware. The damn thing didn’t require any admin permissions to install, and it automatically ran a powershell script to reinstall itself if it was removed. I had to edit the registry to remove it. It’s crazy.