> But consider something like crypto, libssl ... which is linked to almost everything, or libxz, zlib, etc. AFAIK, the reason most Linux distributions have an

> But consider something like crypto, libssl ... which is linked to almost everything, or libxz, zlib, etc. AFAIK, the reason most Linux distributions have an allergic reaction to static linking is because of zlib. There was a vulnerability in zlib some time ago, and it required the distributions to find every single program which had its own copy of zlib (vendoring zlib used to be common back then), update these copies with the security fix (not necessarily trivial, since the vendored copy might be a customized variant of an older zlib release), and rebuild all these packages (which is a lot of "fun" when some of the packages are in a "failed to build from source" aka FTBFS state). The distributions learned their lesson back then.