is that no longer true?
If the application supports it, there’s also systemd socket activation (or traditional inetd sorta stuff too if that fits)
No, now you have the option of using CAP_NET_BIND_SERVICE
If the application supports it, there’s also systemd socket activation (or traditional inetd sorta stuff too if that fits)