4
Services like web servers should be run without escalated privileges, exactly for the reasons that you describe in your question.
While it is true that you must be root to run systemctl, the user that the web server runs under is usually another user with lower privileges. In the case of apache or apache2, the user is is often www-data, apache, or nobody.
...
Only top voted, non community-wiki answers of a minimum length are eligible
