Yeah, but get this! It's not enough to just envoke cmd in Windows with just Win+R (sorry, sorry... Super+R ๐), even though you're invoking it from an admin account, no sir, it's still just a plain user as long as cmd is concerned ๐.
And this is what you get when you wanna do backwards compatibility all the way down to DOS ๐.
My point was, MS has backwards compatibility all the way down to an OS that has no sense of users and permissions and that is why Windows, even nowadays, has these problems. If you get rid of the DOS legacy stuff, you can have decent user permission and security in place, but too much shit relies on legacy code, so they keep it.