@GossiTheDog these proposed changes don't protect against a similar attack though. They do reduce the attack surface making it harder to pull off.
Just moving to dlopen depends a lot on the implementation and how easy it is to trigger the loading of a vulnerable library