And this allows someone to perhaps gain root access to your machine in what way exactly? Or get access to your private/payment info?

Because this is the very real threat users of desktop apps face.