Well root is the default full access account. It is a bit easier to root@serveraddress and brute force in that way than needing to guess which account in the sy

Well root is the default full access account. It is a bit easier to root@serveraddress and brute force in that way than needing to guess which account in the system has sudo access. It also becomes easier to detect when someone is attempting to break in when you can see logs of common user names in a row fail to log in.