The issue isn't that the containers have permissions they weren't assigned. It's that the system configuration allows any (host) user to make a container with any permissions, without sudo.

The issue is that the docker service runs as root and their defaults added the user to a group that allows them to control that service without sudo

So, the root filesystem can just be passed as a volume to a container and then do whatever you want from there.