Comment by znpy

honest question: how is this any better than running non-root containers?

They can do very little anyway, that way.