Imo the theme is questions that you're slightly embarrassed to ask because you think you should already know it. Thinly disguised rants, sea lioning, and fetish exploration (yes I've seen that here) don't qualify.
Basically a lot of the posts here are in bad faith and hide behind the same premise OP is pushing.
UAC can be configured to require a password, just like sudo can be required to not require a password. These things function the same on Windows and Linux.
I'd imagine there are ways to control for that, to some extent. Ie you run an ad in market A but not in market B to see if it works. Wouldn't with for all contexts though.
Even Warcraft 3 was basically a giant retcon of the first 2 games (even as plot light as they were). The series has constantly pulled new stuff out of it's butt.
Browsers are only a (large) fraction of SSL traffic.