Finally got around to reading this fantastic article about Project Panama, and looks like this blog is full of more gems to throw in the queue.
"Using Linux's memfd_secret syscall from the JVM with JEP-419" by @BriceDutheil
https://blog.arkey.fr/2022/05/16/linux_memfd_secret_with_jep-419/
@jw thank you it means a lot coming from you!