The article is about a tool to examine the declarative service configuration provided by systemd. It does not examine services for "unpatched vulnerabilities".

The article is about a tool to examine the declarative service configuration provided by systemd. It does not examine services for "unpatched vulnerabilities". Nor does it examine ssh configuration options. It only examines declared sand boxing config in systemd unit files. If you want a vulnerability scanner and generalize config analysis tool, this isn't it.