It's an odd state of the world but here I am defending unrooted phones. Rootable phones mean rootkitable phones, and considering how many bank accounts are now accessible via touches and swipes, phones that are rootkitable do present a big financial danger.
Then again, we all still use browsers on rootable PCs, where the browser extension protection scheme is Google (hah) and Firefox (double hah) saying "Just trust us, users!".
That's not how it works, though. There's still a root-level UID 0 user identity on non-rootable Android phones, it's just not accessible to you, it's only accessible to manufacturers and hackers. Both rootable and non-rootable phones can be rootkitted.
Heaven forbid the financial system should be inconvenienced. Nevermind that downstream of all the technologies to lockdown finance are the tools to enable an oligarchic tyranny.