Rootless Docker reduces one class of risk, but it’s important not to mistake a smaller privilege boundary for a complete security boundary.