Comment by felipelemos

> On the other hand, changing the docker user to non root might introduce some failure scenarios (eg file ownership)

If you application needs root to execute, with very few exceptions, it is already wrong.