You are confusing mitigation with security. Zeroing out memory after use is mitigation against security flaws like heart bleed. It's not a security feature in

You are confusing mitigation with security. Zeroing out memory after use is mitigation against security flaws like heart bleed. It's not a security feature in it self. Although you are right that the secure process is probably just the better solution anyway. It's sort of like the arguments for DRM. Of course pirates will always break it, but we can still mitigate it in a number of ways.