Your Compiler Can Undo Your Security Checks