Run as non-root where images allow, do not expose dashboard anonymously, keep clusters local for class. For deeper K8s security topics, see existing site guides such as Kubernetes security basics when you are ready — this chapter stays on vocabulary + mini deploy.