a service has far more privs on the system than a browser should have or need (which can be installed on a per-user basis, no admin/root required).