sudo / su is fake security and password is super easy to steal
only way to protect this is to only login to root after fresh boot without logging to any possibly compromised user level account
or maybe run qubes os

nostr:note1xds03mnh2lej9j6q7q268w00xj702xnjyzslg8zye06p4cw8g33sarwk4a