[gw2]

> something like half of the 70% would be prevented

Sure, but the other half are use-after-frees and those would not be exploitable anyway because of CFI and shadow stacks.

[IshKebab]

That is a very bold claim!

[gw2]

Have a look at this repo: https://github.com/trailofbits/clang-cfi-showcase