Also used by ZeroStack[1], which I quite like, but whether it provides 'meaningful' protection am less sure.

1 - https://github.com/gi-dellav/zerostack