That's like saying that a normal user can't write any files to the disk which is just false. System files may be protected, others not so much. I think you should read this

'Think of it this way: everything you can do with your computer as a standard user, a virus can do too'