Maybe I can offer a global flag that can be set to disable patching? Along with exposing a functional API.
If a functional/alternative API doesn't have significant performance downsides, I think that should just be the primary use pattern.
Or, if not, maybe we can consider use some sort of namespacing/prefixing approach.