Everything runs through fully hardened/restricted systemd units, as separate user with minimal access rights for everything

You’d need to escape the software, restrictions and get root to do anything meaningful, while avoiding detection