[kefka]

Yeah, effectively, disabling sudo and setting root's shell to /bin/false does a good job in locking the system down.

Except for root exploits.