I assume they mean a web browser has root access to everything you do online, which is so far-reaching nowadays that it's not far from having root over your whole machine in terms of actual exposure.