And even if you could manually verify the binary output of a compiler and prove it correct, you still don't know that the CPU itself is not malicious.