While they're not great, chroots are much more powerful than most people give them credit for. The trouble comes when people think you can keep a root user contained in a chroot.