Hacker News Reader

Makes me wonder(or maybe I don't want to know) how Heroku has managed this until now? Only unprivileged users?

I don't remember specifically, but that'd be my guess. Non-root users in containers have been fine for a while now.