>As an aside - It's also not obvious it's the best choice for run-time mitigation.
What are some of the current contenders/arguments?