[zwischenzug]

Which only needs to happen once.

[_yy]

Yes but still. If you have a procedure in place to recompile and redeploy everything, you could just deploy the libraries as well.

[protomyth]

Plus, the system admin doesn't just have to wait on the new security-patched library to be ready, they have to wait for everyone who used Go to recompile and distribute their programs.

[jakub_h]

So you're redeploying one binary instead of another binary. You still need to deploy something.

In fact, what about just switching connections to freshly launched VMs?