The root account checks are applied to generated and deployed images to make sure that root account is locked, except for live ISO.