The Sunsoft-4 and Namco 163 also supported ROM nametables; you can inspect their games to find these in ROM:
* Almost the entirety of the entire second 128 KiB of CHR ROM for After Burner is ROM nametables (but the other two Sunsoft 4 games, Maharaja and Nantettate! Baseball, don't use appear to use any)
* of Namco 163 games, Battle Fleet, Dokuganryuu Masamume, Final Lap, King of Kings, and Mappy Kids definitely use ROM nametables. Megami Tensei 2 might. A few others have 1 KiB regions of all 0 or all $FF which might be used as a way to blank the screen.
On the downside, ROM nametables can't be compressed, unlike fixed nametables in the program ROM. On the upside, they can be bankswitched instantly, allowing updates faster that the normal limited CPU-to-PPU bandwidth. (As an extreme example, I switched out ROM nametables every scanline to display an
image with 16x1 attribute zone)