Soon (or actually, already) we'll have MTE and CHERI, and then that C undefined behavior will be giving you security improvements as well as speed improvements.

Soon (or actually, already) we'll have MTE and CHERI, and then that C undefined behavior will be giving you security improvements as well as speed improvements. Can't design a system that 100% crashes on invalid behavior if you've declared that behavior is valid, because then someone is relying on it.