[userbinator]

How many malicious compilers have you actually seen in the wild (in 2012, when that post was written)? And indeed if there were any, why would an AV not just detect the compiler itself?

[OJFord]

> why would an AV not just detect the compiler itself?

Because then users of a binary need to trust that the compiler-user had an AV installed.