If you have the source code[0], you can compile your own version without fuzzification, and any attacks you find will work just as well on the fuzzified executa

If you have the source code[0], you can compile your own version without fuzzification, and any attacks you find will work just as well on the fuzzified executable. This is not true of eg ASLR. If you don't have the source code, it's security through obscurity. 0: Note that obfuscator output is not source code.