> all hardened options for GCC.

Well, you probably can't get away with -fsanitize=undefined
-fsanitize-undefined-trap-on-error yet (object-size and
signed-integer-overflow checks specifically). I know what you mean
though :).