Future versions of Chrome should de-elevate from admin privileges by default, reducing the attack surface significantly.