@phel it's not about security concerns with the implementation. It's about exposing all the privileged syscalls as attack surface to everyone.
Without userNS, a use-after-free in eg. netfilter code is a mildly annoying bug.
With userNS, it's a local privilege escalation.