The service is installed as admin. It can do whatever the hell it wants. This is standard for EDR agents.