> But second to that, I'm not sure why you think nginx_enable='YES' is fundamentally less opaque than an nginx.service file. Both are parsed by another application.

That's true of both plain-text configuration files and Windows Registry keys ;-).