You could use something like NixOS, which has interpreters, libc, etc. in non-canonical paths. And you still have the protections of Linux and speedy security updates.

Of course, this is security by obscurity, an attacker could adjust the malware for such cases.