Modern defenses like ASLR and DEP reduce exploit success, but they do not eliminate the underlying memory corruption flaws that attackers still exploit in legacy and embedded code.
Compromised software updates can bypass your perimeter defenses entirely, making verification of code signatures the primary defense against silent infiltration.