An attacker persists through an unauthorized DaemonSet. Why might deleting one affected Pod be insufficient?

1. The registry automatically deletes the malicious image
2. The controller can recreate the Pod
3. All DaemonSets disappear when any Pod is deleted
4. Pod deletion necessarily removes the attacker's credentials