I wanted to manage the user that runs the geth service directly instead of relying on DynamicUser in the systemd config. The existing geth config didn't really allow this, but adding mkDefault to User let me override it in my own config. While I was there, I thought maybe it would be useful to be able to change StateDirectory and ExecStart too, so I went ahead and wrapped those with mkDefault too - but I'm not really sure ExecStart needs it. Looking for a second opinion there.

FWIW, I wrote a little ethOverride function to change the user and add (most of) the settings that DynamicUser covers, which looks like this:

ethOverride = user: {
  DynamicUser = mkForce false;
  RemoveIPC = true;
  PrivateTmp = true;
  NoNewPrivileges = "strict";
  RestrictSUIDSGID = true;
  ProtectSystem = true;
  User = mkForce user;
};

Then I call the function like systemd.services.<service-name>.serviceConfig = ethOverride myuser.