I don't have access to a vulnerable machine -- just going by comments in the other HN thread. root account is 'there' all the time, yes. This process enables

I don't have access to a vulnerable machine -- just going by comments in the other HN thread. root account is 'there' all the time, yes. This process enables the account proper (rather than just sudo). Evidently some remote mechanisms using root work after the account is enabled.