> Of course there is undefined behavior that isn't security critical.

But undefined behavior is literally introduced as "the compiler is allowed to do anything, including deleting all your files". Of course that's security critical by definition?

Arguably the effort presented assumes the context of LLVM, where there is information on the actual compiler behavior.