[ethan_smith]

Transmission had a remote code execution vulnerability (CVE-2018-5702) through DNS rebinding that allowed attackers to execute arbitrary commands - tracker exploitation is definitely a real attack vector.

[udev4096]

Using a container sandbox such as gvisor would definitely help. Or even using firejail for normal systemd processes