Kubernetes 1.33 enables support for user namespaces by default (https://kubernetes.io/blog/2025/04/25/userns-enabled-by-default/)
This would be a good addition to ensure that Buildkit isn't running as host root when running in privileged mode.
Happy to look at contributing the feature... 👍