The moral isn't "Don't use systemd", the moral is "Write stuff in better languages than C". rsyslog doesn't exactly have an enviable security record either.

I'd love to see more of our core functionality written in the safe subset of some other language such as Rust. I fear Haskell and Go have too much 'runtime' to really want to be at the systemd level, but who knows :-D

I'd use replacements written in Go in a snap.

I fear I've been burned by software written in Go one two many times to just snap it up, but I'd be interested at least.

The sense I got with Go, in my admittedly limited time with it, is that it seems designed by the same sort who think you can write safe software in C, so that while it enforces some safe practice, it still allows for many other of the same things that escape their notice.

Mmm, the 'bites' I've experienced have included Go programs segfaulting, which just feels BROKEN for a managed language. I mean, I've seen Rust programs panic too, but somehow that feels less bad.

Go may have eliminated the most obvious vulnerabilities of C but its core abstractions are actually pretty shoddy. The language is practically built out of edge cases.