...replaced usbguard.service from 15.2 with the same file from 15.1, and usbguard-daemon starts fine from systemd. So one of the many new settings in that file is to blame.