option to build libglvnd without requiring mmap(WRITE|EXEC)

In virtualization and other use cases, mmap(WRITE|EXEC) is a potential security risk. What would the performance impact be of running without WRITE|EXEC? Is defining STATIC_DISPATCH_ONLY enough to disable this feature?