Ah, that was not intentional, thanks for pointing it out. We just wanted to illustrate how the hardening flags need to be added to other flags the user might want to set. There is some more copy & paste weirdness going there.
How’s this: Do not recommend `-g` in CFLAGS by voltone · Pull Request #15 · erlef/security-wg · GitHub ?
