Access to root on the device is the pre-requisite of a lot of attacks, and this presents risks.
https://www.kaspersky.com/blog/android-root-faq/17135/
Also the control which allows users to install sofware from different sources, leads in many cases to them installing malware masquerading as "free games" or similar.
Android malware is a much larger problem than malware in the more controlled iOS world.
so to me that's a real trade off. you have control of your device and the ability to install software from more locations, however your security risks increase.
For some people that risk will be entirely justifiable, for others, it makes sense to have an option of a more locked down environment.
Personally I like Linux for servers (I have control/responsibility) but for my smartphone I use iOS as it's easier to secure and I don't really want to use that device for "proper" computing.