Combined with a working exploit and when not running on the bare metal server that might actually be a valid point. I know when they were released those attacks looked pretty scary, and ECC was supposed to maybe help. I'm not actually sure it does help completely, and that here aren't other measures already in place by now?

ECC only mitigates RowHammer-like exploitations, it doesn't prevents them altogether.