Developing in GNOME OS: systemd-sysext

First problem with entire article:

Secured and hardened Linux have /var mount option with 'noexec'.

https://www.tenable.com/audits/items/CIS_Red_Hat_EL9_v1.0.0_...