Also for some reason they took a very specific reason for the german flag calles Dienstflagge

That already exists. systemd-run is already available today. So the attack surface would be smaller

I think the article (or more Lennart Poertting post) explains it quite nicely. The problem with sudo is that the sudo binary itself has the ability to gane elevated privileges which is a potential attack surface