This is correct that my environment is not clean. Most packages are compatible with DEB_CFLAGS_SET flags. Just to be sure, I posted the second build log, where CFLAGS is set to be empty.
Debuild is normally fine for package builds outside of a chroot. I use debian packages. If I want to ensure that my packages build well, I can use a chroot, but this is not actually something that a package should assume. Chroots are a way to mitigate broad sources of brittleness, but we shouldn't be brittle. How do we ensure this source package has no spurious imports from the environment?