It's not a problem with the root creation but with the update install being left with a root user still active without a password!
DUMB, DUMBER, and DUMBEST!
Industrial Strength STUPID by someone who just did not look! And some idiot who forgot to DISABLE THE F'ING ACCOUNT in the Gold Master!!!!
Not to mention those in QA, as dayglored pointed out, who just did not notice when they went in and enabled their own ROOT ACCOUNTS that it was already enabled!
Somebody’s gonna get fired.