systemd enable services to run with a whole suite of hardening and sandboxing features from the Linux kernel.

Source: Linux Today – systemd service sandboxing and security hardening 101