Interesting. Do you happen to know if OS makers are currently adapting and applying more changes such as the one you described on the x64 feature? Thanks for sharing the link.
Attackers adapted by e.g.inventing Return Oriented Programming(ROP): As they could not inject code into processes directly, they started overwriting the stack with adresses to interesting functions. When an attacked function returns, it does not resume the caller, but executes code in the executable chosen by attackers, with args dictated by the attacker.