That's not how it works, though. There's still a root-level UID 0 user identity on non-rootable Android phones, it's just not accessible to you, it's only accessible to manufacturers and hackers. Both rootable and non-rootable phones can be rootkitted.