http://lkiw4tmbudbr43hbyhm636sarn73vuow77czzohdbqdpjuq3vdzvenyd.onion/article/shawn-webb/2022-10-03/hardenedbsd-september-2022-status-report
Some applications, even some in base (like `id(1)`) call libc functions that call into dlopen/dlclose. This presents problems with llvm's Cross-DSO CFI runtime. libc is an incredibly attractive target given its large surface area. It's incredibly complex.