I feel like hardcoding shebang paths and not implementing a good widespread PATH whitelisting/safety mechanism has created far more problems than we should ever

I feel like hardcoding shebang paths and not implementing a good widespread PATH whitelisting/safety mechanism has created far more problems than we should ever have had to deal with. It strikes me that not for the two above items we might be able to solve this with $PATH resolution and directories filled with symlinks to our "development versions."