At least it is still optional to allow for stack allocated VLAs. Which is the attack vector you mentioned.