[RFC] build: turn down the _FORTIFY_SOURCE level on gcc >= 4.0

@jszakmeister Just curious, do we need to worry about CXX for MSVC? I thought I was only for C++ compilers.