Root privileges allow for a much wider attack surface for escaping out of a VM. Not using root everywhere still helps with defense in depth.