Files in /proc contain quite a lot of information about running processes, including their full command line. In some cases that information can be sensitive, such as when credentials or non-public hostnames are passed in command line arguments. We try to reduce such cases in our code but with some third-party tools, that may be difficult to avoid.

As of now, this is now a concern because all

It is possible to prevent non-root users from accessing either the PIDs of other users' processes or to their command line, etc., using /proc mount option hidepid: https://www.redhat.com/en/blog/hidepid-linux-hide-pid

I'm not sure how far we want to go, but I think we should restrict access at least to command line data.