An exposed dashboard allows unauthenticated workload creation. What is the primary risk?

1. An attacker can deploy workloads inside the cluster
2. The attacker can only read public image descriptions
3. Container image signing is no longer useful anywhere
4. The cluster automatically becomes single-node