Samba being an insecure application doesn't make every decision they made (such as running the auth service as root) necessarily bad.

Don't assume people are downvoting you for "criticizing samba"; they may just disagree with your specific criticism, or even just with your tone.