yeha, but the big projects like linuxserver.io love creating docker images with root access, even if people have warned them it is an awful security practice. I rewrote all of their images in a personal repo, screw that. I won't run shit as root in my machine, even in containers.
There's rootless docker, or podman, or numerous other container runtimes. The beauty in containers is separating concerns. How you choose to run it, root or rootless, is up to you in all but the nichest of scenarios.
Rootful docker and rootless docker can be run at the same time on the same machine too. So projects that require root privileges can still work on a machine where most other projects run as rootless.