I think the headline might be confusing because docker/podman already have the concept of a runtime. E.g. you can pass `--runtime` to set it on the fly or set it in the config...

For example, I don't use crun but a more security hardened runtime instead.