The rationale of disabling the remote-fs.target systemd unit on RedHat-based boxes?

[brlin-tw]

Hello, I would like to ask what the rationale of disabling the remote-fs.target systemd unit on RedHat-based boxes may be?

The code:

robox/scripts/rocky9/base.sh

Lines 10 to 11 in 2b30899

	# Close a potential security hole.
	systemctl disable remote-fs.target

mentions it closes a potential security hole, but does not specify which the security hole is.

This is troublesome, as the default distribution configuration is to enable the unit, which causes behavior differences with the regular installation. For example, I spent a lot of time debugging why the NFS mountpoints in the fstab don't work at boot because of this.

Thanks!