[PeterisP]

"Someone has to have root" is not entirely true - you can easily have root accounts on key systems accessible only by requiring two separate authentication tokens, and have them be held by separate people. Sure, it's inconvenient, makes changes slower and requires more people and thus is more expensive, but that does prevent any single person from doing too much damage.