I'm not talking about sudo su, but actually accessing the root account directly. I remember back in the day I put a file on someones desktop to prove a point, and they couldn't delete it because logging on as root was harder than it should be and they didn't know how.
Unless your company has something locked down. If it’s a consumer Mac, it requires nothing more than a login password.