The device should be root:dialout unless/until you log in on that terminal, when it is correctly changed to pi:tty. Ok, that was misleading. udev sets the device to root:dialout, but getty sets it to root:tty immediately, and login changes it to pi:tty. (There may be some race condition or trigger ...