Kubernetes Pod Security Standards - Baseline is a set of controls that prevent known privilege escalations and minimize the surface area of containers run in Kubernetes. It provides a balance between security and usability for general-purpose workloads.