Reading up on Copy Fail

Podman's rootless containers limit the blast radius of the Copy Fail exploit by using user namespaces to map container root to an unprivileged host user, preventing container escape.