It's unclear to me if I only ever rsync over SSH, whether I would be vulnerable: would rsyncd be started and exposed for the duration of the transfer (though on

It's unclear to me if I only ever rsync over SSH, whether I would be vulnerable: would rsyncd be started and exposed for the duration of the transfer (though on an unprivileged arbitrary port)? (Obviously, going to upgrade asap, but simply curious)