Well... that "attack surface" isn't new, its mostly just repackaging systemd-run...

NekkoDroid 33 days ago | parent | context | favorite | on: Run0, a systemd based alternative to sudo, announc...

Well... that "attack surface" isn't new, its mostly just repackaging systemd-run, which is just used to tell PID1 to launch a new process. So in total the attack surface would be reduced by removing sudo.