Super Duper Secure Mode
microsoftedge.github.io/edgevr/posts/S
Conversation
That combined with enabling Windows mitigations that would generally be compatible with it.
ACG prevents dynamic in-memory code generation including by going from rw- to r-- to r-x similar to not including execmem in SELinux policy, etc. and there are a few more mitigations.