`paxctl-ng -m /opt/vivaldi/vivaldi-bin` required to run it on hardened. I suppose something like `paxmark m` should do the trick in ebuild.