WSL 1 allows for more security. What they should have done was map WSL users 1:1 to Windows users (Wine users work like that). setuid(), seteuid() and/or capability elevations would raise an UAC prompt as if they were called from Windows.