[CameronNemo]

Why should I trust the Arch wiki? People like Christian Brauner think the value of not running as UID 0 outweighs the increased attack surface from the user namespace.

https://people.kernel.org/brauner/runtimes-and-the-curse-of-...

[hda111]

Thanks for writing this. He knows what he is talking about. One of the LXC maintainers.