Docker containers do not need to run as root and the documentation does recommend running containers as non-root users. Yet, unless something is default, it&#x27;s hard to make users follow best practices. For that reason, user namespaces are important. Now, while they&#x27;re not in a stable release yet, user namespaces <i>have</i> landed into Docker&#x27;s master branch. Don&#x27;t expect to wait long for this feature.<p>If you feel there are further <i>actionable</i> steps to move best-practices into default behaviors in Docker today, or improve security please feel free to submit a PR or open a thread on the mailing list. (If it&#x27;s a vulnerability, however, email security@docker.com)