Which statement correctly distinguishes containerUser from remoteUser?

Which statement correctly distinguishes containerUser from remoteUser?

1. containerUser covers all container operations; remoteUser covers lifecycle scripts and processes launched by supporting tools.
2. remoteUser changes the Docker image USER instruction permanently.
3. containerUser applies only to the editor, while remoteUser applies only to Compose sidecars.