Likewise, knowledge of effective hijacking prevention techniques could be relevant in defensive program and system organization.

I don't think his point is very good because array overruns in a heap can be exploitable. Lisps (and other kinds of run-times) don't necessarily separate code from data in their heaps.