For hardened malloc, it comes with Brace which Tad just told me about. I think only Electron apps break, but there are alternatives to using most of them
github.com/secureblue/secureblue/blob/live/POSTINSTALL-README.md
If you put this link in the Wayback Machine, you’ll find another guide that may be of interest! Secureblue aims to maintain usability, so you should be fine with these steps. However, this guide was taken down recently (I would suspect because of the addition of the secureblue website), so there may be outdated info or something.