So the only thingthat runs as root on this phone is the init process which means if you find a vulnerability somewhere in a non priviledged process you will havea hard time getting root on this phone. 