There's nothing special about "-service install". On any system, executables shouldn't be modifiable by other system users, no matter what the executable is and how it's run.