Yes but there's always bugs and some of those bugs lead to privilege escalation. Phones mostly just remove the "user clicked yes on the root access prompt" attack. And other attack surface reductions.