Re: Why would Chrome have the privileges required?
Yup. Which will need admin for the actual installation and subsequent updating, but not running it.
Regarding UAC in Admin Approval Mode ("click yes to allow changes") - it's pretty easy to bypass in a silent way (or used to be, atleast) and not considered a real security boundary, unless the application has explicitly dropped the administrator token (web browser sandboxes and such).
The main purpose is actually (if unofficially) to force/shame software makers into minimizing the operations that need admin privileges, essentially by annoying the user each time.
Which has actually worked out really well - running a Windows system as non-admin (with password/smartcard required for elevation) today is painless. Shame this setup isn't the default yet.
Biting the hand that feeds IT
