> One obvious one is that Toolbx and Distrobox are based on Podman, for one.

And as a result, the containers are rootless.