But this user plans to leave ping running all the time to check that their own Internet connection is working.
Either way, at any given time there’s tons of traffic leaving your network, it just means that software is active, not that a human is active. On top of that, Cloudflare probably isn’t selling the fact that an ICMP ping was received at their DNS server directly to spammers quickly enough for them to act and put an email at the top of your inbox, assuming that spam isn’t caught by a spam filter first.
Charlton Heston Bonus Round: