I know it’s not the issue here really but

the container runs as root

That’s why we need to push for more self hosted containers to support running rootless. There’s no reason for it other than laziness IMHO.

It’s wild to me how many people will jump through a bunch of other random security hoops but not blink an eye about running containers as root

That’s the funnest part of all: we don’t