My debugging attempts led nowhere so far, the journal is really not helpful. Using ExecStart=/bin/sh -c "sleep 5; journalctl --flush" in systemd-journal-flush.service seems to have worked around it, so it appears to be a race.