Making attackers work harder is still a worthwhile goal. No security is perfect.

Also, all of these security improvements are nearly-free assert()s which catch memory bugs.