For those asking what systemd change, easy write up: https://github.com/systemd/systemd/issues/32028
It was in train before the XZ issue was discovered, which may be why the threat actor sped up, started making mistakes and started begging distros to upgrade XZ.