But then you should only get the users account as shell, so while this is a neat trick, being able to gain persistent root if you are already root is not that hard.
It is an ecosystem of daemons that does a lot of things, some of which are guaranteed to surprise you. The specifics of which will vary between releases.
I could easily see some random systemd utility binding a non standard port without anyone taking notice.