Having -Wall and -Wextra with -Werror is the perfect footgun, since
you’re at the mercy of whatever compiler is being used. Get yourself a
manageable set of warnings and make those fatal instead.
That's what we do at $DAYJOB and we are happy whenever a new gcc or
clang release finds new issues.
But as I suggested this should be a development/CI thing, not enabled
by default for redistribution.
Dridi