Why does ImageVolume require priveleged node access

Hi everyone! First post here, and admittedly I haven’t really poured over the community guidelines, so apologies if I’m posting in the wrong space.

I noticed that 1.36 enabled the new ImageVolume feature - I’m excited about this, and I noticed that CNPG is using it already to deliver postgres extensions. I have some use cases of my own that would be helpful to use ImageVolume for. I was disappointed to find that ImageVolume requires the ability to exec commands on the host (docs, source).

I’m curious to know why this is the case? I couldn’t find any reasons on my own, and it doesn’t seem obvious to me. Nodes can pull and run images as pods obviously without host-exec, and ImageVolume feels like it could be implemented similarly (it’s just an image that’s pulled and unpacked). To me this felt like feature that should be able to be utilized on offerings like GKE Autopilot, AWS Fargate, or even my own hardened clusters.

Thanks!