I am having trouble parsing your reply, looks like some parts are missing. Can you rephrase? We were talking about jupyter notebooks, which are typically used

I am having trouble parsing your reply, looks like some parts are missing. Can you rephrase? We were talking about jupyter notebooks, which are typically used for exploratory work, and thus are executed either on local desktop under default user account, or in containers with pretty open access controls. My point was that under those circumstances, it is OK to assume any cache data is trusted. Your reply somehow talks about secured containers and privilege escalation but I cannot figure out how is it connected to running Jupyter on local laptop, nor the threat model you are worried about.