[pjmlp]

Of course they are, anything can be a gateway to inject backdoors, if security is not taken into account.

And as mentioned, if what Zig offers is already in Purify, there is hardly any added value over C and C++, without the headaches of a niche language.

[afdbcreid]

Considering that you often run the code after you compile it, it might not matter. Anyway, like it or not, most compilers don't consider themselves security sensitive and will not consider malicious code that is able to hijack the compiler a security vulnerability.

[pjmlp]

Ken Thompson won the award for nothing, yeah.

[afdbcreid]

Totally unrelated; The trusting trust attack was about downloading a malicious compiler because malicious code was injected into it in some early version.

(And if you ask me, it was indeed overrated, but that's unrelated).

[pjmlp]

That was one way the attack could be done, there are many other ways if the compiler binary can be open for manipulation.