I doubt the number of possible privilege escalations would be much different from on your average compute node. There might actually be fewer if syscalls could

I doubt the number of possible privilege escalations would be much different from on your average compute node. There might actually be fewer if syscalls could be sanitized before reaching Linux.