Comment by yencabulator

Here's an operating system kernel in Rust that can hot load/unload modules at ELF object boundaries, made safe by trusted compiler allowing only safe Rust:

https://www.theseus-os.com/

Upgrading a module in a way that changes its data structures still requires writing a converter from the old format to new.