sudo / su is fake security and password is super easy to steal

only way to protect this is to only login to root after fresh boot without logging to any possibly compromised user level account

or maybe run qubes os

nostr:note1xds03mnh2lej9j6q7q268w00xj702xnjyzslg8zye06p4cw8g33sarwk4a