With the present phones, Canonical provides all the packages and the full ROM files. There is no feature yet for phones that cannot be rooted so I do not see such risk.

There is a feature for Snapdragon SoCs that can enable dual-boot. For others, it is still difficult or impossible.