Looks like the Linux kernel would have a gold rating if kernel.org set X-Content-Type-Options to "nosniff".

https://bestpractices.coreinfrastructure.org/en/projects/34?...