Plus
You can always perform an assembly code review of the most critical subroutines (e.g. those that are ASIL-D) and thereby gain confidence in the correctness of the compiler.
Embedded developers do indeed look at generated assembly code very often.