WKWebView and SafariViewController do, but they run the browser engine and JIT in another process so that the app still doesn’t have the ability to execute unsigned pages.