Author here. I think you are strawmaning my arguments. Personally, I would include encryption libraries in the "system libraries" (I used that term on purpose

Author here. I think you are strawmaning my arguments. Personally, I would include encryption libraries in the "system libraries" (I used that term on purpose) that could be dynamically linked. However, even if they are, you still want to recompile every user whenever that library is updated because of possible ABI and API breaks. And some of those encryption libraries have a history of API breaks. Also, I am building the ideas I laid out in the post, which should make it easier to handle dynamically-linked and statically-linked encryption libraries.