A root lets you make a valid cert for any domain. It can be used to create a man-in-the-middle attack if paired with a proxy.