>all you get is the possibility to [...] execute code

Anyone who's ever done even a beginner CTF knows that achieving code execution is a big deal.

Yep, once you have code execution you find a local privilege escalation and go from there.