I'm a bit disappointed. I thought the article would have some discussion on how to actually build untrusted container images in a safe way, but it is really jus

I'm a bit disappointed. I thought the article would have some discussion on how to actually build untrusted container images in a safe way, but it is really just about how to connect to the Depot API and have it do it for you. I imagine there must be something inside there that answers that part (from some of their other articles, maybe that's BuildKit? unsure).