Presumably the restriction on RET applies to things like calls using function pointers and therefore, by extension, vtables? I could see how they might maintain

Presumably the restriction on RET applies to things like calls using function pointers and therefore, by extension, vtables? I could see how they might maintain return addresses safely out-of-band somewhere, but will every function pointer call have to go through vetting? Will we have to go back to the days when virtual functions were evil?