The claim that “systemd has been compromised” is easily refuted by simply checking the link you provided.
This is, upon investigation, merely another age-verification topic, so I’m closing it.
It’s a legal question, not a technical question. Until Canonical provides a legal opinion, we’re not opening this subject to internet speculation by random non-lawyers.
See Ubuntu's response to California's Digital Age Assurance Act (AB 1043)