The noexec mount option prevents any binary or script located on that filesystem from being executed directly. This is commonly applied to filesystems such as /tmp or removable media to reduce the risk of malicious code execution. nosuid disables the effect of the setuid and setgid bits on that filesystem, nodev prevents device files from being interpreted as such, and ro mounts the filesystem as read-only, none of which specifically block execution of binaries.