vbmeta is a partition that contains cryptographic hashes and flags for verifying other partitions (boot, system, vendor). It ensures the device boots only signed, unmodified images. When you root, you break this chain, so vbmeta must be adjusted.