Relax ;) Devuan pulls libc from debian. The next version of libsystemd
could do anything, but some of the same people can put the same code in
debian's libc. And libc is a great deal more difficult to audit, too.
For the record, I think getting rid of libsystemd is a good thing. It's
tidy. Bugs happen and every thing you don't have installed won't be a
possible source of trouble.