That's kinda true, but if you use the compiler inserted address sanitizer code it will turn bugs from exploits into crashes. You can't exploit a OOB write if the write fails and the program crashes.

if you can afford the cost of that, just write your program in any other language c with asan is a lot slower than the safe alternatives

I made another comment about exactly that, but was addressing the concern that asan doesn't make code safe.