Processes in a Docker container should not be run as root. It’s safer to run your applications as a non-root user which you specify as part of your Dockerfile or when using docker run. This minimizes risk by presenting a reduced attack surface to any threats in your container.