This is an auto-filled bug because this package does not respect user's CFLAGS.
While SSP is really good for security purpose, I'd expect that with CFLAGS="-fno-stack-protector" the package should not have stack protection.
In this case the file /usr/sbin/ntpd (and maybe some other file from this package) has stack protection.
To check the SSP status you can use: checksec --file /usr/sbin/ntpd
The same issue happens for relro and pie.
I'm sorry but the stack-protection issue was a false positive.
Anyway the bug is present for RELRO and pie.
PIE, in other packages is managed by a useflag (see ssh and pam)
At least this one appears fixed in 1.2.0, which I'm about to push.