> BTW. Use the AddressSanitizer. Please! The toolchain improved the usage and safety of the language so much.
In general I agree with the sentiment, use AddressSanitizer in testing/debugging. However it's not meant to be a hardening option, AFAIK, so I advise against using it in production (along with other sanitizers), even if you can live with the performance hit.