Sure, but such a product requirement can be made to be legally required without legally requiring root access.