making mp's migratable (virtiofs on pve managed paths only)

[Johannes S]

One obvious attack @Johannes S slides point out is someone with root on their device creating an account with the same UID as another user. Then mount the share and su to the other user where you can peruse or alter their files.

Just to avoid wrong credits: They are not my slides but from the speaker Sergej Schmidt who did the talk For the rest I agree with you obviousvsly.
NFS is ok if you have no important data (aka my homelab where everything important is also stored on cloud storage) or for stuff like storage for ProxmoVE, where the whole cluster specific network (corosync, storage network for nfs etc) has it's own dedicated network infrastructure where users and their own devices don't have access.