If you're root in a namespace and manage to escape, you can have root privileges outside of it.