It does not make a real difference in practice. Outside of the server space, the most important thing a user has is not access to their root filesystem but access to their home folder - to their data and fun things like .bashrc and .profile that allow to hijack pretty much everything the user runs