Probably the inverse. If nobody is running their C programs through Valgrind then you're basically giving away free vulnerabilities to any adversary that cares

Probably the inverse. If nobody is running their C programs through Valgrind then you're basically giving away free vulnerabilities to any adversary that cares enough to look for them. Microsoft sounded the alarm on this decades ago.