In exasperation, people truly concerned about security / secops are turning to unikernels and shell-free OS; at the same time agents are all in on curl | bash and other cheap hacks.