Being included via libsystemd isn't the only way ssh can load liblzma, it can come as an indirect dependency of Selinux (and its PAM stack) IIUC. Which makes it

Being included via libsystemd isn't the only way ssh can load liblzma, it can come as an indirect dependency of Selinux (and its PAM stack) IIUC. Which makes it even a bit more funny (?) since Arch also doesn't officially support any Selinux stuff. There might be other ways sshd might pull in lzma, but those are the 2 ways I saw commonly mentioned. On a different note, pacman/makepkg got the ability to checksum source repository checkouts in 6.1.