Administrators may revert to the previous behavior if they so wish. Sounds like a sane change to the defaults, but anyone who isn't securing against 3rd party

Administrators may revert to the previous behavior if they so wish. Sounds like a sane change to the defaults, but anyone who isn't securing against 3rd party code can turn it back on (to return to much more Docker-like security/performance).