> fixes (either security or only bug) have to be applied to only one place: the new DSO(s). Yes, and all of your bugs can be introduced in a new single place a

> fixes (either security or only bug) have to be applied to only one place: the new DSO(s). Yes, and all of your bugs can be introduced in a new single place as well! Seriously though. People love static linking because it solves more problems than it introduces, despite its downsides. I will argue that it’s easier to keep a system secure with static linking. You can upgrade the service that is insecure immediately. Or else you need to wait for a Big Bang deployment, and it can be held up by some random thing that isn’t even in the critical path.