Percona and Chainguard aim to cut CVE patching and reduce overhead with secure-by-default images for open-source databases.
I set up this Linux 'Watchdog' and now my system auto-reboots when it locks up ...