Arbitrary, rather than random. Most of the time, it's entirely up to the developer. I'm sure the percentage of applications that actually require administrative privileges to perform tasks is in the single digits or lower.
This is probably true. I'm surprised we don't get after companies for unnecessarily requiring admin with their apps.