systemd. dbus, udev, etc are sometimes a really bad idea

What do any of those examples have to do with an attack that requires *physical* access to your firewall? And, going back to my point, an attack that, in order to be successful, requires knowledge only obtainable if you have already completely compromised everything already?