[charcircuit]

It's related because malicous code can use the setuid binary to elevate its privileges.

>If it was provided by a daemon, built into systemd, or anything else

Yes, this is also dangerous.

[remram]

So what's your recommendation? Removing the user?