A username could be anything, but root is always root. Disabling the root password means a cracker needs to take the additional step of identifying a valid user account to target. Not a particularly large step, perhaps, but a step nonetheless.