The guardrails are helpful for humans as well. Its not mindless - its the difference between an obvious compiler error and a silent use after free that becomes a security vulnerability.

It’s a fire sprinkler with iirc a plug that melts when it gets too hot and releases the water automatically.

The plug material is fragile and hanging things off of it risks damaging it and accidentally unplugging the water, hence the sign

The issue isn’t that the containers have permissions they weren’t assigned. It’s that the system configuration allows any (host) user to make a container with any permissions, without sudo.

FWIW this isn’t a container escape. It’s just the distro shipping a shitty default that lets the users on the host access root.