> #2 don't do that
I wish everyone to have easy deployments where environments, OS versions and everything else are always consistent. :)
> #3 monitor other software components for security updates -- you need to do this anyway in any of these systems.
Sure. But having multiple virtualenvs means you need to monitor all of them on all of deployed hosts. Having everything packaged separately means you can do audits much easier and without location-specific checks.