CHERI seems to accomplish much of what Fil-C does, in-hardware. And removes some of the trust from the entire build toolchains in your entire supply chain, because memory-unsafety cannot be stealthily inserted.