I followed cloudflare guide to run a command to install cloudflared, but I realize cloudflared is running as root and have a flag "--no-autoupdate".

Isn't this service dangerous if it got root access and no update? and are there additional things I have to configure to make it more secure?