Just replying to provide some context [1] for those who come across this comment as I think it's pretty interesting. Also OpenBSD are working on something for this [2].

[1] https://seclists.org/oss-sec/2023/q1/92

[2] https://marc.info/?l=openbsd-tech&m=167673316325935&w=2