I remember mcAffee webadvisor came preinstalled with a crappy asus vivobook i got when i was younger, i could not delete it, i had to manually remove the files from the programfiles folder but it reinstalled itself every time it updated, the laptop bricked itself recently anyway so it doesn't matter.

Good endpoint protection doesn't run with any root privileges.