In couple of places in the code the capability check is done as

has_capability('moodle/user:update', $systemcontext)

This can be done at the user context instead of the system context

Example :
In user/profile/lib.php function

is_editable