There have been major vulnerabilities over the years where being root allow the container to take over the system.

Checkout https://www.stackrox.io/blog/the-runc-vulnerability-a-deep-d...