It's not that complicated.
Default to system, use two states, and integrate the toggle in a top level UI context as a single icon that flips between sun/moon. Putting it deep in a menu is what creates all this pretentious hedging because we're subconsciously worried about the user not being able to get to it.