I assume that by design a LLD macro {#UNIT.ACTIVESTATE} -> {$SYSTEMD.ACTIVESTATE.SERVICE.MATCHES} -> "active" should discover only active usints.

But there are quite a lot of units which are in "inactive" state, which passes the filter by partial match.

If this is indeed was not by design, the value for regexp should be changed from "active" to "^active".