Even if this was done 100% correctly, I still see a big problem with this approach: The vulnerable function is unreachable now, but that could change with the

Even if this was done 100% correctly, I still see a big problem with this approach: The vulnerable function is unreachable now, but that could change with the very next commit. So you are basically trading less work now for more work before the next release (which could sometimes make sense)