If it mattered they would not be using C without any of those tools or techniques. Therefore, it is empirically proven that it either does not matter or they are deploying code unfit for purpose and should not be writing such code.

And that is precisely what they said:

> Ideally people who don't care about secrurity [sic] should not write code when security matters.

The absence of legal consequences further supports the fact that it does not matter.