You'd need the rooted unit to be logged into the user's Amazon account and have their wifi password, otherwise they'd notice something is wrong quite quickly. Yes, most would probably just redo the setup and forget about it, but that's still quite a risk and requires a lot of access.