Unfortunately that’s expected behavior! We run everything on pynq as root – you’ll notice that the jupyter terminal is the root user by default. PYNQ touches a lot of devices and memories that require elevated privileges. There’s a nice explanation by Peter from a while back on why pynq works this way.
Thanks
Shawn