Currently, there is no way to configure the SecurityContext (including capabilities) for default init containers created by the Solr Operator (e.g., cp-solr-xml, setup-zk). Users can only set SecurityContext for the main Solr container via containerSecurityContext, but not for the operator-generated init containers.
In our environment we have hard policies like "drop all capabilities" or disabling "allowPrivilegeEscalation".