Allowing hostPaths to mount to pod arise the probability of getting access to the node's filesystem.
Make sure that hostPath volume is not allowed. However, if allowed, ensure that allowed hostPaths are only mounted and are readonly.