Bounds sanitizer with trapping is used in the wild by important projects, e.g. the Linux kernel on various mobile devices. WG14 is also working on such topics,

Bounds sanitizer with trapping is used in the wild by important projects, e.g. the Linux kernel on various mobile devices. WG14 is also working on such topics, so this is more your ignorance speaking. But complaining on the internet about the work of volunteers is rather bad style anyway, IMHO. I am not sure what VLA on the stack have to do with it, but VLAs certainly enable bounds checking when used. The more important thing is the type system part.