The docker group is root - run Docker rootless instead
Here’s something that took me far too long to internalize: being in the
docker group is equivalent to having passwordless root. This is not a bug,
it’s not a misconfiguration, and Docker even
documents it. It’s
just a consequence of how the daemon works - and most Linux users who run Docker
never realize they’ve quietly handed out the keys to the whole machine.