While this post has some merit, all of these problems can easily be solved and there are dozens of guides on hit. The entire "CIS Hardening guide" will give yo

While this post has some merit, all of these problems can easily be solved and there are dozens of guides on hit. The entire "CIS Hardening guide" will give you step by step tutorials on how to solve all of this, you just need to bother looking it up. Look, you need a trained sysadmin anyway, no matter where you deploy. See for instance all the ubuntu machines out there that never have seen the admin update it. Or all the terraform scripts that simply get copy pasted by orgs. While I do agree, this is a problem, there are security conscious distributions if kubernetes out there like RKE2 or "rancher government" to make things much more secure. This is actually my job. If you need someone how to secure your cluster and make sure stuff like this is very unlikely to happen, you can find the info in my profile. But what it comes down to is that if your DEVs have direct cluster access and you have no monitoring and alerting setup, you are kind of operating on the same level as copying and pasting stackoverflow answers and pushing them directly to prod without code review.