On: Threat Actors Now Target Docker via Container Esca...

[nijave]

Afaik --privileged just re-enables all the Linux capabitilies in one go (https://man7.org/linux/man-pages/man7/capabilities.7.html)

So... None. If you need capabilities, you should add them back individually. Networking-related ones are pretty common (net admin and the raw socket one)