Using pragmas, attributes and optimisation guarantees is the point of implementation-defined behaviour in the first place.

The Linux kernel extensively uses gcc extensions. That doesn't inherently make it insecure.