While they're not great, chroots are much more powerful than most people give them credit for. The trouble comes when people think you can keep a root user contained in a chroot.
Correct, and that make them much less powerful than most people think :)