Well, in a sense we already have it. The latest CVE if you removed some specific modules form being loaded it mitigated the attack....so one option would be that as much as possible becomes modules.....