Using the application manifest approach is the right way to ship software that opts into segment heap. The registry thing is just a convenience for local testing.
Anyway to globally turn it on when a blacklist or denylist or whatever in case something individual acts up ?