I was wondering how those client softwares protect themselves from worms / malwares etc. Symantec protects their files from malicious users / admins with the tamper protection mechanism, but sometimes for troubleshooting it needs to be disabled.
This is how to stop the service: https://support.symantec.com/en_US/article.TECH192023.html
But, if a user can do it, can't a malicious worm do it as well? Which causes the whole protection to be useless?