Your concerns about privileges are legit. One thing you can do to mitigate this is run with only the privileges you need to run the queries you want. There's no requirement that you run as root (and you can even run as a normal user), but you will receive limited results and errors when permissions are insufficient. AFAIK most osquery users do run

osqueryd

as root though.