For almost 10 years, I have been using Linux based operating systems, so I know very well how giving root access to applications may be a security issue.
However, from my searches regarding Android, I have found the following information, relevant to this question:
- If you root the device yourself, you generally install SuperSU too, which will ask you whether it should allow root access to applications when requested.
- There are malware which can root a device from inside, and will use su without you ever knowing. I remember the first time I rooted a device, and it was an APK which would exploit security vulnerabilities.
So, by taking into consideration the two presented points, in the case that a malware is successful in rooting my device, and I don't have SuperSU installed, wouldn't my system be more vulnerable, since now any application can request root access without my knowledge?