Systemd is like a million-line behemoth of an octopus.

Still doesn’t do DHCP options adequately, much less logic-driven ones.

And cannot be blocked from using network socket, much less selectively.

It’s a huge malicious vector awaiting to happen, oh wait, that happened.