In every context that I've seen it, ASLR is there to be annoying to circumvent instead of being the sole line of defense. Generally other techniques are present as well to mitigate the risk of such an attack.