(re-)mount home [and other?] with noexec (and nosuid [among other useful mount options]) for better security?

[Patrick]

Change default shell from bash to zsh by default?

Now that noexec made a ton of progress… https://forums.whonix.org/t/re-mount-home-and-other-with-noexec-and-nosuid-among-other-useful-mount-options-for-better-security/7707/73 Can zsh help with the interpreter lock? Do you think zsh restricted mode is useful for this?