Kaniko does not need privileged mode, as it doesn't depend on a Docker daemon and executes each command within a Dockerfile completely in userspace.