Security Concern for OpenWrt (luci) Integration?

I have been using the ubus integration but has recently trying out the luci one.

One thing I wonder if it’s a security concern or not, the ubus integration suggests creating a separate user and ACLs. The luci doesn’t, and just uses the root again.

Is there a security concern here?

Cheers.

References:
OpenWrt (ubus) - Home Assistant (home-assistant.io)
OpenWrt (luci) - Home Assistant (home-assistant.io)