For a truly personal computer however, there is no such thing as privilege escalation. All the stuff I care about are accessible from my account. There is nothing useful to an attacker outside my account.
The security model for this use case is clearly very different from a server with several daemons running, or even remotely logged in users.