Having sudo itself makes an OS less secure since malware can use it to easily get root. Sure a rust version may be more secure, but even better would be deleting it entirely.
Nothing a user is supposed to do should require elevating to root to do.
>it’s much better than just giving out the root password to users.
This is even worse. Access control should be set up properly instead of having users assume the identity of other accounts.
1. Don't. Just include the correct configuration as part of the OS.
2. For a configuration file use a group for passing out write access to users on the system.
3. Have a daemon which handles updating configuration files based off some central source of truth which pushes changes to a fleet of servers. Programs could directly communicate with this daemon to get their configuration.