more features

static/features.html

@@ -65,6 +65,9 @@
   substantial defenses against the most common classes of vulnerabilities (heap memory corruption)
   along with reducing the lifetime of sensitive data in memory</li>
                 <li>Hardened app runtime</li>
+                <li>Stronger app sandbox</li>
+                <li>Prevention of dynamic native code execution in-memory or via the filesystem
+                for the base OS without going via the package manager, etc.</li>
                 <li>Filesystem access hardening</li>
                 <li>Enhanced verified boot with better security properties and reduced attack surface</li>
                 <li>Enhanced hardware-based attestation with more precise version information</li>