A scheduler places a Pod on a node. Does that decision replace runtime security enforcement?

1. Yes; it eliminates container privilege risks
2. Yes; scheduled workloads automatically become trusted
3. No; every Pod must instead run on a control-plane node
4. No; placement and runtime controls serve different roles