Comment by kyboren

I'm not going to say that's a good idea, but I've long had an idea along similar lines that a source-only distribution that generates a bespoke calling convention, stack frame layout, syscall number mapping, etc. for each individual machine at install time would do a lot to mitigate RCE threats.