Mandatorily on all platforms, or just by default? Because of the security & debugging features in OpenBSD's malloc framework[0] I wouldn't be surprised if the OpenBSD port used the system malloc, I'm guessing that's just a compile-time switch away.
It can be configured to use the system malloc (IIRC running stuff like asan requires this, or at least I have to set a 'no jemalloc' build option), but I'm not sure if any platform ships with this option turned on. OpenBSD sounds like one that might, but I guess I thought they just used the normal Firefox ESR (definitely could be wrong though).