First step is to obtain root? I understand choosing not to use root for day-to-day activity but how in the world can a device be considered secure if the user i

First step is to obtain root? I understand choosing not to use root for day-to-day activity but how in the world can a device be considered secure if the user is not allowed full control of the OS when they want it? Edit: Oh, it's also not open source. This device is pointless.