With exploits like that, it seems like sandboxing is becoming increasingly irrelevant. I don't think it's a good argument - what about defense in depth? Don't

With exploits like that, it seems like sandboxing is becoming increasingly irrelevant. I don't think it's a good argument - what about defense in depth? Don't antivirus packages have heuristic protections? Or are those, in general, useless?