That's really only true if you are smarter and more knowledgeable than the security team of the phone OEM... and you unroot after you have made changes.
One example would be being able to use hosts based blocking of malicious domains while using a VPN at the same time. Does not work without root. Has nothing to do with being smarter than the security team or anything either.