Absolutely, 100% agree. I'd go further, and require a password or pin too. But - they don't currently do this, and there's no way that I can think of to reliab

Absolutely, 100% agree. I'd go further, and require a password or pin too. But - they don't currently do this, and there's no way that I can think of to reliably, as a third party, validate SuperSU etc is actually doing this. EDIT: Also, some users really are.. ill informed and gullible. I hate saying it, but a large number of employees even at a tech company will click accept after a quick popup that says "For best 3D performance, we need root access to use your phones graphics chip directly".