I recommend that route as well.

Since you don’t know much, stick to native services. In most cases those are already preconfigured if native service package is available.

You don’t specify.

Do you use containers or not? It sounds like you are trying to start a rootless container.

Otherwise, you are over complicating things.

Add to that need to use machinectl to establish normal user session with DBus in it.

But that only makes sense for rootless containers. User management in rootless container and users in roootful containers can get complicated fast and depends on how image is built.

Only if there is such a huge vulnerability that they will have no choice.

That’s just my guess.

Promise of support is a tricky one.