I get it, there is no good or bad, people have different models of the world and all. But still, there are certain infrastructural things objectively necessary

I get it, there is no good or bad, people have different models of the world and all. But still, there are certain infrastructural things objectively necessary for security updates to make any difference. Doesn't matter if it's embedded, desktop or massive server farms. Updates still require management. Like it doesn't matter if an IoT vendor publishes updated .so files if you have to download and apply them manually to each device. So even if you have to work with broken infrastructure, you still have to recognize that it's broken to find a workaround. And convincing people about upsides of static linking is not the hard part, there is consensus. The hard part is merely making static linking work and realizing for how much stuff it can't be done at all.