Pollination is good
HardenedBSD was forked with the explicit idea of testing new security ideas and seeing what works, then pushing the code upstream back to FreeBSD. *BSD is not like Linux distros where they rarely work together. A lot of security ideas require some major changes that would not be feasible as a simple branch.
If you can read the address space you can defeat ASLR
Ohh, you mean segfault when you read unallocated memory? Even if you could, are you planning to read all 8,589,934,592GiB of the address space? with O(n) scaling, assuming a crazy low 1 clock cycle per address, it would take you about 35 years to scan the entire 2^63 user virtual address space at 4ghz.
I am not saying ASLR is perfect, I'm just saying it's not nearly as simple as you make it out to be.
The next step is to update documentation and submit updates to the patches they have already submitted upstream to FreeBSD
Remember, UNIX spelled backwards is XINU. -- Mt.