Because it’s just another attempt by people who have emotional issues around systemd to derail a technical thread while adding nothing new or insightful. The people who actually work on these projects have been making efforts to reduce dependency depth and otherwise protect against a general class of attack which could have been used to target many other things, both users of liblzma and more broadly other popular projects with limited resources.