> For example, any library consumed by systemd (such as openssl) usually requires pid1 to relaunch.

That does not require a reboot, `systemctl daemon-reexec` is enough.