What difference does it make if it's part of the systemd project or not? Do things suddenly become a more problematic attack vector when they're organizationall

What difference does it make if it's part of the systemd project or not? Do things suddenly become a more problematic attack vector when they're organizationally part of the systemd project instead of the sudo project?