But even if they didn't, "sudo -u root /bin/bash" or similar gives it to you unless sudo is extremely locked down (which, from audits I have done, is "rarely if ever").
There are hundreds of ways to get root prompt even with the root account nominally deactivated.