I compiled all security enhancing configuration I found for macOS at: https://github.com/mathiasbynens/dotfiles/pull/686

Not sure these are mitigating the OP issue though. Still, can't be bad to harden macOS a little bit.