Still accurate.
Context of the day: https://www.openwall.com/lists/oss-security/2024/03/29/4
"openssh does not directly use liblzma. However debian and several other distributions patch openssh to support systemd notification, and libsystemd does depend on lzma."
No, systemd is not the root cause. The root cause is the sorry state of funding FOSS that leaves even core system components crumbling under tech debt.
We already had that conversation after Heartbleed. We still haven't solved it.