This isn't so much systemd's fault, but more one of POSIX/Linux. Processes aren't spawned without any privileges at all and then get them assigned selectively (

This isn't so much systemd's fault, but more one of POSIX/Linux. Processes aren't spawned without any privileges at all and then get them assigned selectively (thats what's done on Fuchsia/Zircon: https://fuchsia.dev/fuchsia-src/concepts/process/jobs https://fuchsia.dev/fuchsia-src/concepts/process/jobs ), but instead mostly inherit their privileges and resources from their parents.