Docker Isolation

In unraid's implementation of docker, since it runs as root, are the containers leveraging Linux namespaces / subuids to provide some additional isolation from the host? 

For example, if I gain access to root on a privileged container and break out, is that user still root or am I mapped to some useless subuid?

Docker provides this functionality but for whatever reason it is off by default.