I quite like the init and journal parts of systemd. I’m not a hater. But I’ve been around long enough to see where this attestation road might lead to. Google tried it recently with their WEI initiative.

But now the time is ripe again with child safety being mentioned left and right. This is all speculative but combine secure boot ,and kernel level attestation and suddenly one must use verified applications which among other things can’t block ads and whatnot