I bet they eventually run JITs using the exclave system, so that they can have full JIT performance in a hardware-isolated space. Lockdown mode is a good mitiga

I bet they eventually run JITs using the exclave system, so that they can have full JIT performance in a hardware-isolated space. Lockdown mode is a good mitigation but a two-thirds performance loss is unacceptable, and once they get it working for lockdown mode they can drop all the hoopla. (Though it’ll still be complicated for multitasked apps on iPad.)