Comment by enriquto

I understand the mechanism. I wanted to know the reasons for this choice.

Why choose to break user boundaries? Why can't docker images be files in the possession of each user?