Hacker News Reader

Gradle is no different here. Ditto many other build tool.

But maven does not.

you mean because it's xml instead of executable code?

No, because it was designed that way - declarative.

You can have xml with code-like-structures, e.g. Ant

Maven plugins and extensions can execute arbitrary code, so you should still exercise care when running an untrusted maven project.