Hacker News Reader

Still, somebody has to have it. If the number of people is too low, you risk them all being unavailable when you really need them. And there isn't a whole lot you can do to stop a malicious actor who already has root.

Not sure this matters much. Most places I've worked have considered local root exploits not worth patching. So if you have a user account, you have root.

The more systems there are, the more likely this kind of thing is.