&gt; but the developer&#x27;s thought that it was working as intended<p>Really?  Is that evidenced by Lennart&#x27;s response to this, which stated &quot;The ability to hose a system is certainly reason enought to make sure it&#x27;s well protected and only writable to root.&quot;[1]?  I think it implies the <i>opposite</i>.<p>1: <a href="https:&#x2F;&#x2F;github.com&#x2F;systemd&#x2F;systemd&#x2F;issues&#x2F;2402" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;systemd&#x2F;systemd&#x2F;issues&#x2F;2402</a>