pocket imx8mp: permissions of /etc, /root wrong

Freshly written sdcard image, after first boot. At least these paths are owned by uid 1000:

/etc
/etc/apt/sources.list.d/reform_bookworm*
/etc/firefox
/etc/skel
/etc/skel/.*
/etc/motd-full
/etc/motd-rescue
/etc/profile.d
/root
/root/.config
/root/.config/*

Notably, Desktop Documents Downloads Music Pictures Videos in /etc/skel are correctly owned by root.

Makes me think --customize-hook='sync-in ./etc/ /etc/' is the source of the problem.