[azakai]

Another option is something like Type-After-Type (make allocations use type-specific regions, so use-after-free is still fully type safe at least):

https://download.vusec.net/papers/tat_acsac18.pdf

[pcwalton]

Yes, something like that may work. Note that this approach also has time and memory overhead quoted in the paper. There's no free lunch.