You also have to trust the source code of the 'untrusted' compiler (that is, read it and make sure it doesn't directly contain any back door).