That is correct. This is probably why privesc exploits are much more expensive than adobe reader exploits.
You are kind of arguing against yourself here.