I was not referring to the setup complexity. Setup is performed just once. I was referring to the runtime complexity that comes naturally from having to take into account non-root user permissions and lack thereof. These peculiarities are quite a low bar, but they are still a non-trivial hurdle in the way of devex.

I am a fedora/opensuse user and happily use podman with selinux.

IME it's not too bad, but I see what you're saying. I guess we're mostly in agreement.