Having a named, non-root user and group in the base image would make non-root use-cases easier. It seems like a pretty common practice to say "USER nobody:nobody" in a Dockerfile.