Thanks for providing NixOS commentary. I’d was leery something in Nix would break, so I never tried.
No problem. FWIW I use doas over sudo on all 3 of my Nix hosts and I've only ever had one issue - VeraCrypt has a hardcoded shell-out to sudo, so I can't use it.
The proper fix would be VeraCrypt implementing polkit, but I just use cryptsetup's implementation.