There's only root if people make a userdebug build with user-accessible root or make a derivative of GrapheneOS with major modifications. The production builds

There's only root if people make a userdebug build with user-accessible root or make a derivative of GrapheneOS with major modifications. The production builds don't have uncontained root since it would greatly roll back the security model. Only a few core processes run as a limited subset of root.