security = 1/convenience

That said, the docker folks deliberately designed docker to be promiscuously unsafe to keep themselves in control:

https://stackoverflow.com/questions/33054369/how-to-change-t...

I believe redhat didn't design this limitation into (docker compatible) podman