diff --git a/TODO b/TODO
index cf40a25191..7fc66bea2f 100644
--- a/TODO
+++ b/TODO
@@ -127,6 +127,10 @@ Features:
 
 * replace most calls to sd_bus_send() by sd_bus_message_send()
 
+* replace all uses of fopen_temporary() by fopen_tmpfile_linkable() +
+  flink_tmpfile() and then get rid of fopen_temporary(). Benefit: use O_TMPFILE
+  pervasively, and avoid rename() wherever we can.
+
 * loginctl: show argv[] of "leader" process in tabular list-sessions output
 
 * loginctl: show "service identifier" in tabular list-sessions output, to make