In the vast majority of cases, yes you do. I had to use an exploit to root my phone. When I lost it and insurance got me an identical phone, there had been a firmware update that patched the hole. Didn't update anything else, still the same outdated version of Android, I just couldn't root it. I still haven't been able to. It drives me mad.