3 ms·

You can restrict what the root account can do in a member account using SCPs as an additional safeguard as well.