Your point 3 would be correct with docker and rootful podman, not rootless podman. I have a whole reddit post where this was hashed out, and over the many months and several comments in the post, I’m fairly certain I’m correct in my stated observations

reddit.com/…/psa_for_rootless_podman_users_runnin…