&gt; &gt; It has more than 2M lines of C code. Almost all libraries were written from scratch.<p>&gt; Every professional security researcher reading this just raised an eyebrow and thought to themselves, &quot;That&#x27;s a vulnerable application.&quot;<p>That may be true, but substitute &quot;C&quot; with &quot;Python&quot; and wouldn&#x27;t you have the same reaction? Maybe you would expect it to be slightly less vulnerable, but the key risk that I read in that statement (I am not a security professional) is the &quot;2M&quot; and the &quot;written from scratch&quot;. The risk from &quot;C&quot; is secondary.