What approaches are being considered here out of interest? I’m only familiar with Firefox’s use of Rust, but haven’t heard anything about other browsers trying to use that particular approach.
https://microsoftedge.github.io/edgevr/posts/Super-Duper-Sec...
https://microsoftedge.github.io/edgevr/posts/Introducing-Enh...
What they've found is that JIT can be disabled in most sites with no user-visible impact.
This, combined with WebAssembly, is a game-changer in waiting for browser security.
[1] https://chromium.googlesource.com/chromium/src/+/ddc017f9569...