$ ls -ld /bin/ping
-rwsr-xr-x 1 root root 60288 Jun 15 2016 /bin/ping
Not on my Debian:
> ls -ld /bin/ping
-rwxr-xr-x 1 root root 44104 Nov 8 2014 /bin/ping
You're talking about using software that has access to your keystrokes, mouse movements and clicks,
Only its own (although I wouldn't trust most distros' X setups to appropriately protect applications from each other in that regard, but that's another peeve...).
the plaintext of your TLS sessions.
It also controls the layout and placement of the content that it's presented. The majority of PC-using Americans do pretty much everything in their web browsers.
This is not about the computers of the trump voters (these would use IE 11 on Windows anyways...), but about the computers of more tech-savvy users who just wouldn't expect something like this.
If Google were malicious, they'd be able to get all the data they'd ever want without ever touching root privs.