> that's the way things will be for the long time. There are some changes coming where application developers will have to explicitly acknowledge that librarie

> that's the way things will be for the long time. There are some changes coming where application developers will have to explicitly acknowledge that libraries they're using are using native code: https://openjdk.org/jeps/8307341 https://openjdk.org/jeps/8307341 (the new, soon-to-be-stable FFM API already has this behavior). It doesn't change the distribution mechanism of native code, but it's some sort of step towards better security.