I always thought that it was safe to change the root password after a host had been added to vCenter, as vCenter just uses the root account for the first connection and to create the vpxuser account and that always used the vpxuser account to connect thereafter.
I realise this article applies to ESX 3.5 (and not ESXi 4 as is the case for me) but it has made me a little hesitant??