That's a common misconception. Systemd has absorbed many disconnected projects, all of which were having their own issues well before systemd.

It's a net security win once you have done the math. I did it 2 years ago but I would think the logic still holds true.