This doesn't always protect against out-of-bounds writes. Although if these sentinel values are in read only memory mappings it probably gets pretty close. (Especially if you consider kernel memory corruption a "bitflip".)

Well, yes, the author described it as "a heuristic", which checking sentinel values would seem to match.