Unless you don't mind exposing your Proxmox host, you should always go for unprivileged LXCs ...