Any stub that is write-once (never needs patching) could be placed in regular r-x memory instead of special MAP_JIT memory, avoiding the need for a W^X mode switch before the call.