Part 2 goes along with this.
There exist a whole class of attacks on software which can be prevented only through address space layout randomization (ASLR). That feels misleading. Doesn’t ASLR only matter if you already have a buffer overflow or such?