[whydoyoucare]

No one knows for sure, though compromised compilers are not far fetched - there has been an implicit trust on compiler toolchains. Reproducible builds are a few years out from full general adoption.

[LtWorf]

Assembly code can be read to see if it matches.