I think you got that backwards.

apple is blocking exec flag on mmap'ed blocks because of security concerns.

Malware _relies_ on that ability to avoid static analysis.

Is that not what I said?

The way you phrased it can be interpreted as the inability to allocate executable memory is for unrelated reasons but is being “spun” as a security plus post-hoc, rather than the conscious consequence of a decision to prioritize security.

The block on allocating executing memory flows from the security concern, rather than security “spin” flowing from the allocation restriction.