I will update my toolchain and try --high-entropy-va and stack-protector-strong later. We will probably need to ship libssp-0.dll as well. Thanks to jsg for hints.