With root, malware can reach out to UEFI anyway, and can do whatever it likes.