The only sure way to beat that type of attack is to write your own compiler on your own hardware, not to rely on a different compiler that someone else wrote.

The linked paper disagrees.

Only if the second compiler is trusted. If I can hack one publicly available compiler, I can hack two; your second compiler should be private.