This is by design. The kernel still runs the processes inside the container. If you namespace the user running `ps`, it will not be able to see the container processes. The only reason you're seeing them is because you're in the default (root?) namespace.
The container on the other hand cannot see the host's processes or other things. At least not without an exploit.