Comment by sabedevops

What does this protect you from that you’re exposed to by running a well-crafted rootless container on a system with SELinux or similar?