Well step one is to just stop doing it? I guess someone will need to start publishing a static-only linux distro

I think you don't fully understand how the attack works.

Had sshd been written in go or rust, the attack would have still been possible.

of course, I never wrote otherwise?