"Privileged Container in Docker Is a Bad Idea", therefore add an user to the docker group gives it root privilege escalation potential (?)
https://www.trendmicro.com/en_us/research/19/l/why-running-a-privileged-container-in-docker-is-a-bad-idea.html