it would be much harder to implement such monitoring if they don't have root on your device.

There are degrees of difficulty. If you use Signal, you make it more difficult than if you use whatsapp but easier than if you have a rooted phone with open source software.

Also, you make it easier than it has to be with giving away contacts/phone numbers.