you are in the OS environment, the loader is not running anymore. When the installer populate the devices like harddisk, it has to set file ownership, and etc. All these operations are run under the root privilege. The harddisk protection program is not part of the loader, but inside the harddisk sectors to be load during start time. That sector is not set by default, it has to be written to the harddisk, and that requires privilege.