That sounds like something that’d be good for /etc/fstab.d, similar to hidepid
.
Mounting certain directories (/bin, /usr/bin etc.) would break many things with nosuid
. Mounting directories like /home with nosuid may be useful but then it wouldn’t have any effect on the other setuid binaries.
We could use one of the methods above to remove setuid bits from most binaries and then use nosuid
on directories like /home.
Using multiple different mount options for increased security would be a whole other topic.
Edit by Patrick:
Created (re-)mount home [and other?] with noexec (and nosuid [among other useful mount options]) for better security? for it.