Containers are changing from where we originally thought certain practices were going to hold true. These ideas and practices no longer hold true.
Kernel modules are going to start to be installed, delivered, and configured through containers (delivered by Red Hat). SSH servers are now running in containers (some delivered by Red Hat).
Systemd is running in containers (some also delivered by Red Hat).
Security and security content is not what someone thinks should or shouldn't be in a container. It is about ensuring the container is secured properly.
By not evaluating certain security rules, the container is considered less compliant and more vulnerable especially with the change in what is happening to containers.
Also, what OpenSCAP can and cannot do should never be the determining factor in security content as many other security vendors consume our content that don't have the same limitations that OpenSCAP does.
The world has and is changing how it uses containers so that our original assumptions are no longer valid. This (and the fact that others consume our content) is why many PRs are reverting the machine platform.