I’ve confirmed that a privileged container can unmount a host target if the volume map is mounted as shared. With slave propagation, the unmount only took place inside the container, without affecting the host target.