To be fair that's for building the image. The Image itself is debian which is irrelevant from selinux point of view. But I agree, you want your build system to

To be fair that's for building the image. The Image itself is debian which is irrelevant from selinux point of view. But I agree, you want your build system to be secure also. Not sure why they give this advice.