I think the point about root is not so much about whether Xorg is run as root, but rather that any application can then elevate itself as root by listening to t

I think the point about root is not so much about whether Xorg is run as root, but rather that any application can then elevate itself as root by listening to the key events to catch your password (for example when unlocking your screen) and then sudo with it.