Speculative execution cpu bugs. Or whatever the next class of problems is that can expose bits of process memory without software memory bugs.
That's already a fringe case. Do you really think everyone's writing web applications in a language like rust without any unsafe (or equivalent)?