I switched from Docker to Podman and the real security upgrade was going rootless

For years, I’ve run Docker on my home server, and it basically just worked. It was also a subtle convenience not having to type sudo. The real upgrade became obvious when I moved the whole stack to rootless Podman; the improvement wasn’t that Podman was new but that the always-on root control was removed. This single change redefined what a compromised container can potentially do to the host. That boundary is a significant part of the security picture if you have containers running at home.