LPEs are frequent enough that people no longer use low-privilege user accounts to sandbox potentially malicious software. They are only used to control access for well-behaved users without any intent to subvert the system, not attackers.

The difference here reminds me of the distinction between the regular Paxos algorithm and the Byzantine Paxos algorithm.