Rescuing double robustness: safe estimation under complete misspecification