/usr/bin/fusermount is marked as suid and there is no way to disable that (no suid USE flag available). Also it could use cap_sys_admin+ep instead of the suid bit for added security, so having filecaps USE flag would be nice.
fuse 3.x has had USE=suid for a while. Thanks!