Under the floor would definitely be safer. I thought bumper height regulations were supposed to be matched.
Anyhow, now you've got me thinking about what can be done in the interim to maximize safety with a spare in the back.
I just went and put my compact spare in the car to measure the distance behind it. When butted against the rear seat back, the compact spare has 19" of space to the rear trunk lid. If you were to depressure it, you might get an additional 7" of space for a total of 26" to the rear trunk lid, as the sidewalls are ~3 ½". Maybe just remove the valve stem? And keep a valve stem tool with your other flat tire paraphernalia.
26" before impacted is actually a fair amount, and appears to be deeper than the penetration of the Chevy Equinox, which doesn't appear to have penetrated more than a foot. However, can we do even better?
I'm wondering if the safest strategy is to do as some have shown, and tie the tire up to the top crossmember. By tipping it up, you put the leading edge of the tire at the base of the seat, where the hinge is going to be the strongest. Plus, you've tied it to the top crossmember on the rear deck lid, which should be fairly strong. Plus, you've given yourself a lot more margin beyond the 26" to the end of the trunk. And, then deinflate it as above, by removing the valve stem, and you've given yourself maybe 30" to the back of the car. So, the top red arrow indicates you'd strap the compact spare to the top crossmember. Strap it in a couple spots. The bottom red arrow shows that there's 25" from that point in the floor to the back of the trunk. As you can see, even without deinflating the compact spare, you've got more than 25" to the back, then if you deinflate it, you may have over 30" before the compact spare would be impacted. Food for thought.
And, flip the spare over, would give you some more margin of error.
View attachment 868842