Even with the Ubuntu patch dropped, if you don't set a password for root, you'll _rightly_ log in automatically if you boot with "single" or "emergency" at the kernel cmdline because they run "/sbin/sulogin --force".