I remember when I first needed to run containers I specifically went with podman because it doesn’t require root access out of some vague fear that docker can be exploited to break my stuff. I feel validated.