In my experience the performance is nearly the same as without. The code is fairly optimised. And I agree: one could use systemd-sysext with something like rpm

In my experience the performance is nearly the same as without. The code is fairly optimised. And I agree: one could use systemd-sysext with something like rpm-ostree to create very robust systems with selective immutability.