bug 914073 made me think that we should probably enable USE=system-webp and others in the hardened profiles, given they generally get security fixes faster, and while there's a chance of more bugs (non-sec ones), hardened users would presumably prefer that tradeoff.