But APT does. It can run the post-install script for the package, which can certainly include the live-patching bits. It's not like live-patching needs a contin

But APT does. It can run the post-install script for the package, which can certainly include the live-patching bits. It's not like live-patching needs a continuously running daemon. Saying that APT can't do this is nearly equivalent to saying that APT should not be trusted to run any post-install scripts at all, which basically means it shouldn't be trusted to install half the software out there.