Comment by tmtvl

This may be a controversial statement, but I don't think projects should distribute any flags aside from the bare minimum to get everything working. E.g.:

  -std=c17 -lm

And let downstream add their own flags (-Owhatever, -fsomething,...) on top of that.