Had you actually read the manpage you'd realize that "root" has full capabilities, except where you configure it not to for specific processes or under specific

Had you actually read the manpage you'd realize that "root" has full capabilities, except where you configure it not to for specific processes or under specific conditions that are under your control, which is mostly for situations around setuid-0 marked binaries.