Realistically a lot of Java apps are shipped as fat JARs that do in fact include the (Java) world. Hot-patching apps to use newer versions of JARs because of s

Realistically a lot of Java apps are shipped as fat JARs that do in fact include the (Java) world. Hot-patching apps to use newer versions of JARs because of security bugs, outside of the update stream of the actual app itself, is not really a good idea due to the risk of regressions. Docker has basically codified the failure of dynamic linking in the real world.