That is very important to realize that root phones are not to be trusted, you never know who has access to your phone, but also there are some apps that require to be launched in the background and these apps also can watch your activities.
It should not be rooted and it should remain company default, once you root your computer it, it is now vulnerable to attacks from third party untrusted, application and software, I guess you should understand what you are installing in your phone to avoid getting compromised.