On the other hand: Have you ever heard of examples of malware which told the use to root their phone?
I think CyanogenMods solution, where root access has to be enabled in the Developer Settings, which have to be enabled by tapping the Android version number 6 times, is the perfect solution: My mum would stop immediately doing such a complicated thing if she wanted to install something.