What is a common mistake with Linux capabilities and seccomp in Container Security?

Running containers with privileged mode or broad capabilities for convenience largely defeats isolation.