[egsmi]

In theory that’s what bitcode protects against.

Today, that doesn’t save binaries not distributed through the store or ones you compiled yourself via other compiler chains.

It is possible to change that. One could even imagine it as part of the loading procedure.

https://lowlevelbits.org/bitcode-demystified/

[saagarjha]

Bitcode wouldn't really help too much here.