In my Docker container, why can I still bind the port 1 without `NET_BIND_SERVICE` capability?

Question

I\'m using Ubuntu 18.04 Desktop. Here are more details about my question.

Recently, I\'m writing some test code that wants to do this: when it is run as a no