Basically. Now, it&#x27;s fine to throw in obscurity or unusual mechanisms on top of good security practices. I used that to stop high-strength attackers before. Yet, we must be careful to note the difference between these mitigation results:<p>A. We stopped those vulnerabilities from working because nobody can bypass this mitigation.<p>B. We stopped those vulnerabilities from working because very little talent is working on beating our mitigation.<p>World of difference there as Chrome and SFI&#x2F;CFI teams I linked up above found out when smart hackers and braniacs from CompSci began convergjng on their work. And shredding it.<p>Code-Pointer Integrity was last one standing after first round of peer review. I&#x27;ll use it for medium-assurance if it survives 2-3 more. Check it out.