Consider adding -D_FORTIFY_SOURCE=2 compiler option

[Gumix]

Most of common compile-time options that harden against memory corruption attacks were added in #7587, however -D_FORTIFY_SOURCE=2 requires more thorough attention. It doesn't work well with ASAN, and requires compilation with optimizations (at least -O) for all files, including sources in ExternalProjects.