Is systemd's hand-rolled Desktop-Bus-over-SSH tunnel a security worry?

security.stackexchange.com

'hand-rolled'?? Is there some other way of programming I don't know about?

I mean, say, immature, or lightly tested or something, but 'hand-rolled'??

> Is there some other way of programming I don't know about?

Unfortunately - yes, there is. There is a school of developers who choose to pull in a third-party library even for left-padding a string: http://www.haneycodes.net/npm-left-pad-have-we-forgotten-how...

They could automate the implementation of the protocol from the spec, as has been done to TCP/IP on at least one occasion(VPRI STEPS).