Rootless Docker and Its Hidden Security Trade-Offs (kenmuse.com)

Rootless Docker reduces one class of risk, but it’s important not to mistake a smaller privilege boundary for a complete security boundary.