FYI:

In our corporate environment we run vulnerability scans, and one of the
most common complaints of the scanner is "unquoted service paths."

To fix this "vulnerability," I use a quoted service path for cygrunsrv.exe;
e.g.:

"C:\Program Files\Cygwin\cygrunsrv.exe"

This seems to confuse cygrunsrv -L, though, as it produces no output.

Bill