I see what you're saying and that's true for the most part.  But what if it exploits buffer overflows and the like to escalate it's privlege's.  I think with the right (or wrong depending on your mindset).  I believe at any level they could be dangerous.  It's just going to take a lot more effort to do and no little "script kiddie" will be able to download virus toolkits and make a new one.  They'll need to be built from scratch by knowledgeable people.  Just MHO.