Of course it works with pointer + length, the whole point of hardware memory tagging is that is a proven failure with 50 years of examples, that leaving to C developers the task to manually prove pointer + length are valid, just doesn't work regardless of what is being sold as story.

So lots of money is being burned to ensure that C code is caged and does no harm, in scenarios where C is to still be used.