SSH security

Hi all, I created an user with SSH account but no sudo permision. Sorry if this is a noob question but what's difference between sudo-enabled account and 'root'? What can be the security issue here if passwords of those accounts are hacked? How to prevent the issues (if any)?

Thanks.