Podman has been mature and sane. In cases where $someone's container depends on su privs, I blame the $someone, not Podman.