Before we merge something like https://github.com/openshift/vertical-pod-autoscaler-operator/pull/219 to address https://issues.redhat.com/browse/OCPBUGS-42343 let's make sure it's really what we want.

From the linked PR:

"...before we go too far down the path of this PR, I would like to take a step back and make sure that we are very deliberate about where we land on the security vs convenience tradeoff. Maybe we could create a spike card to examine if things have changed since we originally created the VPA operator. For example, maybe we can run with fewer privs such that we can relax the node selector entirely, or maybe there are enough other similar juicy targets running on a worker node that adding one more doesn't reduce our hardening, or maybe we don't care as much about security posture as we used to, or maybe there are other alternatives to solving this issue, etc."