DECONZ | Bad idea to let container 'Privileged' for USB passthrough?

[Gitonthegrid]

Hi all,

I am a bit new to the Proxmox world and therefore I want to have my containers as secure as I can.
On the website https://tteck.github.io/Proxmox/ you are talking about setting up the container as 'privileged', but what are the downsides of that?

Besides that I have more 3 questions about this:

1. Can you do the passthrough after the installation without the need of install the container privileged?
2. Is it possible to do it a other way to get the USB recongnized by the Deconz container?
3. Can you set the container back to privileged after the setup?