Statically-link everything and ship it as single file EXEs or containers. Offer different versions. Sandbox programs at the OS level to mitigate old (or new)

Statically-link everything and ship it as single file EXEs or containers. Offer different versions. Sandbox programs at the OS level to mitigate old (or new) vulns.