On the plus side, it’s much easier to understand from a security model perspective

Lol, no. Way more code in Systemd. Also more CVE per year than in some bad (now dead) init/svc' lifetime.