And most of the time is a lost battle to force people to change, so it is easier to bring in people that have other culture towards security when plugging software into the network.
As for GraalVM support for LLVM, that is mostly for language interoperability purposes.
Because is my case Java is the only language with libraries that implement all the rare needs I have. And because I need to create an application with the smallest memory footprint possible. And in my best attempt at it, I use a Rust Webserver that use a static GraalVM compiled Java library containing all the business code thus eliminating the fat Java http/web libs, so I have a lower exe footprint that translate is smaller memory footprint because executable are loaded in memory at one point.