Maybe I was not as clear as I could be, sorry. I meant that privileged shares root account with the host and that privileged is less secure. Unprivileged is more secure because it has no privileges and it only uses normal user accounts.
For privileged you do also need to configure /dev/tun, but you do not need to change permissions.