Change the macOS root account password to something random and never look back (mitigates this irresponsibly disclosed vuln: https://twitter.com/lemiorhan/status/935578694541770752)

set_random_macos_root_pw.sh

#!/bin/bash
# Disallow exporting of new local shell variables
set +a

# Generate random password, 32 chars with mix of upper/lowercase alpha,
# numbers, symbols
pw=$(env LC_CTYPE=C tr -dc 'a-zA-Z0-9_\$\?' < /dev/urandom | head -c32)

# Set root user's password
dscl . passwd /Users/root "$pw"

# Test if you're brave
# echo $pw

# Delete value of pw variable
unset -v pw

# Allow exporting of new shell variables again
set -a

Disclaimer: I've only tested this on myself a few times :P