Default Kubernetes Service Accounts Still Widely Used, Raising Security Risks
A recent security review found that roughly 60% of workloads still run under the cluster's default service account after two years, exposing clusters to privilege escalation. Disabling the automatic token mount and assigning dedicated service accounts are essential steps to enforce least‑privilege access.