Detecting and mitigating CVE-2024-12084: rsync remote code execution

It's unclear to me if I only ever rsync over SSH, whether I would be vulnerable: would rsyncd be started and exposed for the duration of the transfer (though on an unprivileged arbitrary port)?

(Obviously, going to upgrade asap, but simply curious)