StateDirectory looks like it's also always the environment variable 'STATE_DIRECTORY', regardless whether it's a user or system unit, right?
systemd-run -p StateDirectory=test -t sh -c 'echo $STATE_DIRECTORY'
works fine with both `--system` and `--user`, so seems like that's the same too.