Same for me on Chromecast, it’s pretty much unwatchable overnight, started probably about a week ago. I’m to lazy to set up adblocking for my full network, and I was fine watching the skippable 15s ads, and the occasional longer ones, but currently I mostly get at least a full minute of ads on my TV.
You’re right, containers are not VMs, and I’ve never claimed that. For the matter of basic unix access control for a beginner they are similar enough to treat them as such. It’s enough of a baseline for basic security for a beginners workload imo. For advanced use cases - absolutely do not treat containers as you would VMs.
Imagine your containers as very lightweight mini-VMs. Would you run everything as root in your virtual machines? Containers aren’t really that different to classical VMs from an operations point of view. You have a different attack surface, but it is still there, and running as a non-root user inside the container reduces this attack surface, and should IMHO be the default. Privileged containers and users may be required for specific purposes, but should not be the norm, if possible.
Neat, thank you for the hint - only recently got a ccwgtv, and I’m still not used to the fact that you’re able to install apps like this 😂