The idea of a dynamic system is to have a static set of binaries and auto adjusting configs. There are lots of areas where file based IDS works. In fact config management tends to pivot off of file changes.

Pretending its too complex to be secure is a logical fallacy.