I think that is a bit strong. Sure, you aren’t gaining much protection if you just allow sudo -su root but there are a lot of valid use cases.
Logging.
A bit of an “explicit” check to keep you from doing something stupid without thinking.
You can configure sudo to only allow specific commands from different users. (Maybe a trusted friend should have permission to reboot your Minecraft server but nothing else)
I think that is a bit strong. Sure, you aren’t gaining much protection if you just allow
sudo -su rootbut there are a lot of valid use cases.