[Bender]

My trench is keeping backups of ISO's that do not contain this creeping garbage. I will manually patch apps and where I can't the OS will be read-only and ephemeral. This will be my process until governments are no longer vulnerable to bribery.

I suspect the dark pattern this will lead to is user-maintained ISO's as was the early days of Microsoft. People would slip-stream in patches, applications, better default settings and in some cases, malware.