How to avoid using root user in Istio CNI

Microsoft Defender for Cloud reports 2 problems related to my AKS instance with Istio installed.

  1. Usage of pod HostPath volume mounts should be restricted to a known list to restrict node access from compromised containers"
  2. Running containers as root user should be avoided

It indicates that both problems are coming from Istio CNI pod. Is there any way to remediate them?