Secure setting for shell for unused root account The security patch to Apple's root login security flaw — to 10.13.1 (17B1003) — has changed the shell setting reported by

dscl . list /Users UserShell


for root to /bin/sh (from /bin/bash). What does this accomplish? It's been suggested that for extra security I should set the shell for root to to /usr/bin/false. Does it still make sense to do that?
Basically bash and sh are two different shells, have a look here. Maybe an Apple employee liked sh more than bash and changed? :-)

This question and answer discuss login shells in some details. But the short answer is yes, it always makes sense to put the login shell for root to something non-existing. 

(Technically it is not always, but in those cases you hopefully don't have to ask that question :-) )