Closes #12895 Amazing work by @globin & @fpletz getting hardened compiler flags by enabled default on the whole package set