OK, I have no words for this: https://github.com/systemd/systemd/issues/6237
If your username doesn't match what Poettering expects usernames to be (and doesn't seem to be documented anywhere, but `[a-zA-Z]+` is *probably* safe?), then systemd will happily run your user services as root.
Reply: not-a-bug, don't use “invalid usernames”...
Paging @KitRedgrave, @mwlucas and @phessler for hilarity.
Bobinas P4G is a social network. It runs on GNU social, version 2.0.1-beta0, available under the GNU Affero General Public License.
All Bobinas P4G content and data are available under the Creative Commons Attribution 3.0 license.