If you think it's gonna be hard to audit the xz code base, systemd is 1.3m lines of code...