[ghostpepper]

Making attackers work harder is still a worthwhile goal. No security is perfect.

[astrange]

Also, all of these security improvements are nearly-free assert()s which catch memory bugs.