Don’t directly flash that boot.img, unless you want to make OTA-updates unnecessary complicated. You also shouldn’t / don’t need to flash vbmeta, just follow the usual root procedure:
I’ve been running CalyxOS rooted since it’s been released, no issues so far. (Obviously you loose the ability to lock the bootloader, it will always be a compromise)
