[tyingq]

>it can open up that port to hijacking by rogue processes

That seems relevant if the process is using a non-privileged port that's >= 1024. If we're talking about privileged ports (<= 1023), though, only another root process could hijack that, and those can already hijack you many other ways.

[cmeacham98]

What about processes that aren't root but hold CAP_NET_BIND_SERVICE?

[tyingq]

Sure, should have mentioned that, and perhaps namespaces too.