Matthew: It could have been designed such that shared objects which needed an executable stack required a special label – this is what was done for PaX/GrSecurity. But they decided that old objects would default to getting an executable stack. Reversing that decision on the default in the compiler seems like a bad idea.