`-Weverything' seems to have found a few problems. Also enabled clang sanitizers by default.
No functional changes.