Right... but then if the threat is remote access, the author would have to remove nonsense like systemd making your box insecure (racy init shellscripts being t

Right... but then if the threat is remote access, the author would have to remove nonsense like systemd making your box insecure (racy init shellscripts being the pinnacle of security), and old platform support that you don't build in openssl being "abhorrent security practices".