No it isn't, it's like any account that has sudo permission to become root.
It isn't root all the time, and is only root when provided with the proper password.
That’s why I said “essentially” the whole point of the attack is that the installer gets “root privileges” when the user enters their password to install. It’s kind of moot if they’re actually root when it’s got super user privileges.
I should have clarified. My account is a Standard non admin account. It never asked me for my password or an Admin password.