You can actually control most of this using an application manifest. The advantage being you can prevent any non-"known" dll from loading from any folder it's n

You can actually control most of this using an application manifest. The advantage being you can prevent any non-"known" dll from loading from any folder it's not supposed to. Moreover you can ensure that it's embedded in the binary so if someone tries to modify the manifest it breaks the cryptographic signature on the binary. To anyone going "but what if they replace the binary!" well then they've already gotten past the air-tight hatchway.