Rootless Docker and Its Hidden Security Trade-Offs

Rootless Docker reduces one class of risk, but it’s important not to mistake a smaller privilege boundary for a complete security boundary.