After some searching I finally found a sensible summary of differences between Windows Installer and ClickOnce Deployment:
- to create a Windows Installer package, one needs a seperate setup project in the studio
- ClickOnce installation from CDROM needs Full Trust
- only with Full Trust can ClickOnce write to the registry (HKLM)
- … even then, filetypes have to be registered manually by creating appropriate keys