PAC and BTI are two security features available on arm64. They are designed to mitigate Return-Oriented Programming (ROP) and Jump-Oriented Programming (JOP) attacks respectively. Please see the PAC/BTI page on the Debian Wiki.
The following graph is updated daily, and shows the number of packages in Debian Sid with PAC/BTI enabled.
The full list of binaries without PAC/BTI is also available.