[RFC] Implement analysis for exploit mitigation coverage

I’d be interested in something like that, and I think it’d be really useful.