It could conceivably be used as a second-line defence, similar to content security policy. This may be a bad idea depending on how it is implemented and whether

It could conceivably be used as a second-line defence, similar to content security policy. This may be a bad idea depending on how it is implemented and whether the system is tested with it turned off.