One of the stronger defenses in hardened_malloc is our own implementation of hardware memory tagging (MTE) which integrated shortly after it shipped in production with the Pixel 8 (https://grapheneos.org/releases#2023103000) and we had it enabled by default in around a month (https://grapheneos.org/releases#2023110700).