It's insecure to run random applications as services in session 0 aside from those which are designed to run as a service (one would assume a service would be more thoroughly designed and secured than a desktop application). If you make an app a service and it can be exploited, the entire system...