KILL is definitely not desirable. i'm debugging this now on centos with systemd, weewx, and rtl_433.
for example, the sdr driver spawns the rtl_433 command, and if you kill weewx, you end up with a rogue process, and the next time you start weewx, weewx will fail.
as another example, if you are doing database activities, sending a kill could end up in lost data, not because of database transaction atomicity (databases take care of that), but because there can be data in weewx that is not yet inserted.
as another example, sometimes it takes weewx awhile to generate a report. so the 60-second default of systemd is not appropriate. we probably should default to a 5 minute default (assuming that no one will have a system where the report generation takes longer than an archive interval, at least not intentionally).