So... how does Mac enable the root password? If you're not running as root, and root is disabled, there must be an intentional hole somewhere, at least until it's enabled.

Or have I missed something?