We don't enable that exec-protect feature on by default explicitly for this reason. You are right - jit needs it.