Services running on a non-native systemd unit (i.e. auto-generated from a legacy sysvinit script) have a number of deficiencies over native systemd units, e.g. no automatic restarts, no hardening. One example is https://phabricator.wikimedia.org/T240826.

Such units can be detected via "systemctl list-units | grep LSB".

We should track/convert internally created service scripts (distro-provided services without a native systemd unit are often not converted for a reason and somewhat out of scope, e.g. exim4 which is very complex and are e.g. only fixed in buster, but not jessie or stretch).