I think better to do something on app level which makes sandwich plain unprofitable (experimenting there). Where infra can help is to just make time between signing and confirmation small. But even ethereum blocktime is not bad if you (ironically) avoid mev-resistant rpcs.