“Currently, MTE is only available on the Pixel as a developer option, intended for app developers to test their apps using MTE”
ARM’s Memory Tagging Extensions catch memory corruption at the first bad access. Project Zero waited since late 2017 for a phone that ships it. The Pixel 8 has it, buried in developer options, and turning it on system-wide takes adb commands Google calls “absolutely not a supported device configuration.” Chrome mostly bypasses it with its own allocator. The mitigation Project Zero waited six years for ships switched off.