Privileged LXCs definitely have a bad name, but I agree they shouldn't be necessary all the time. My use case at the moment is explicitly for bind-mounting to keep the UIDs (which IIRC is all privileged really does).
Might need to accelerate my plans for moving off of Proxmox... (Which i've been saying and researching for years 🙈 )