To block this, set a random password for root:

sudo dscl . -passwd /Users/root $(uuidgen)