Recent versions of certbot need to be run as root, so there is no good reason to run it as an unprivileged user anymore.