In the Windows installer we have the option to start tlclient directly after installation. However this will start the client with the raised privileges from the installer. This might expose the user to unnecessary risks as the client is allowed access to things it shouldn't. This is similar to bug 7067, but with less obvious practical consequences.