is_admin? != is_system?

If the exploit can provide system privileges I feel like should be run  even if the user is admin already.