My understanding is that code execution is tantamount to getting root, because there's always something to exploit.

But for practical purposes, running a botnet as a user and running a botnet as root end up accomplishing about the same thing.