container escape

What security benefits do containers get from running as a non-root user?

I'm trying to understand the security difference between running a container with its default user and explicitly setting a non-root UID and GID. For example, I might run…