Is CyanogenMod with root disabled as secure as stock unrooted?

With the 2013 Nexus 7 coming up on EOL I was curious if using CyanogenMod to keep the OS up to date with root disabled is a secure as stock and unrooted. Thanks

from xda-developers http://ift.tt/28Z9pBK
via IFTTT