Thanks for the great comment! I just updated the article and explained that I misunderstood how "su" works. I also removed the statement about running untrusted

Thanks for the great comment! I just updated the article and explained that I misunderstood how "su" works. I also removed the statement about running untrusted binaries. I had simply added it to the article without thinking much to have a closing line for the article. I found sourcing the profile trick useful in case the chrooted users need a customized environment such as custom PATHs or something else user specific.