For opensource standards the instructions look pretty okay? Looks similar to instructions for projects like Mattermost, OTRS, etc.
however a cursory review of the codebase indicates that most of the services run as the zulip user and authentication uses certificates rather than passwords.
That would mean your concerns regarding /root would be solved automatically.