With SOCK_STREAM, I can mitigate a large part of why syslog() is bad and implement a complete syslog server with very little code in an efficient way. With SOCK_DGRAM, I can just hang my hat and go home, admit that there's no doing better than current syslogd implementations, and get drunk when people start using journald on embedded boxes because it's so much better (tm).

http://www.openwall.com/lists/musl/2015/08/14/6