diff --git a/static/features.html b/static/features.html
index 7eaca1f4..494c8c41 100644
--- a/static/features.html
+++ b/static/features.html
@@ -337,8 +337,18 @@
project again).
-
Prevention of dynamic native code execution in-memory or via the filesystem
- for the base OS without going via the package manager, etc.
+ Android Runtime Just-In-Time (JIT) compilation/profiling is fully
+ disabled and replaced with full ahead-of-time (AOT) compilation. The
+ only JIT compilation in the base OS is the v8 JavaScript JIT which is
+ disabled by default for the Vanadium browser with per-site exception
+ support.
+ Prevention of dynamic native code execution via either memory or
+ storage for the base OS including nearly all the base OS apps. For the
+ OS itself, only the processes involved in the OS package management
+ system can write data to storage that can be executed and only the
+ media DRM sandbox can do in-memory dynamic native code execution. The
+ Vanadium browser and WebView are excluded in order to support the JS
+ JIT compiler.
Filesystem access hardening