MSVC is almost completely silent with the default warning level though, both in C and C++ mode, at least from my experience (it might have gotten better in very recent versions, I wouldn't have noticed since first thing I do is bump the warning level to /W4 anyway).
VC++ is actually quite good, has SAL, /analyse and SFIR. Also much better than many other compilers, when looking beyond the big three.
Implicit conversations is a common source of errors. Certainly a nice feature for pentesting.