https://chromium.googlesource.com/chromiumos/docs/+/master/security/noexec_shell_scripts.md

https://forums.whonix.org/t/re-mount-home-and-other-with-noexec-and-nosuid-among-other-useful-mount-options-for-better-security/7707 should be implemented first before this one.

This could be implemented by removing read access for user user from interpreter's such as python and compilers such as gcc.

Interpreter lock might break many things. Not clear yet if this might become a default enabled feature.