We have been already using shim v2 (containerd-shim-runc-v2) on cgroup v2 hosts:

We should use shim v2 on cgroup v1 hosts as well.

I think we can safely switch the default, but if we fear potential regression, probably we should have a new daemon flag like --containerd-shim-api=(1|2) which defaults to 1.