Ubuntu 23.10 is addressing this challenge head-on. The new release will feature restricted unprivileged user namespaces controlled and regulated by AppArmor policies.