> And UB shouldn't be a scary thing 99% of the time, as you won't be hitting it anyway (or its actually the result of another real bug,

This is exactly how exploits are made. Accessing UB usually is the result of "another bug" because the UB isnt a bug itself.