I mean docker runs in sudo privileges for the most part, yes I know that docker can run rootless too but podman does it out of the box.

So if your docker container gets vulnerable and it can somehow break through a container, I think that with default sudo docker, you might get sudo privileges whereas in default podman, you would be having it as a user run executable and might need another zero day or smth to have sudo privilege y'know?