If the user is assigned a limited account, it's less likely that the machine will be rendered unbootable. Anything that can render the machine totally hosed ought to require admin privileges.

Similarly, malware running as a limited user should only be able to install itself for that user, rather than all users on the machine.