>with special software configurations and features to detect and prevent attacks

I could imagine a special build of the OS where everything was compiled with Address Sanitizer. You'd take a bit on performance and battery, but, tradeoffs.