[AstralStorm]

It takes just one local root exploit for ADB. Which is why it has to be switched on manually on the device.

The other way is supposedly protected by manual installation and signing keys.