Yeah for sure, it's a real issue. In general, seccomp feels hard to use unless you own your stack top to bottom.