Why? Performance doesn't matter for that use-case. Maybe less features means more secure, on the other hand established projects (or even the basic HTTP implementations in other languages stdlibs) are probably better covered security-review wise. (edit: unless I missed it, it doesn't even check against directory traversal?)