[mburee]

Can you elaborate? I mean it's not like that a lot of authenticator or crypto is written in C

[Mandatum]

The possibility for Remote Code Execution vulnerability from an unauthenticated user. This should be offloaded into a memory safe language, ideally by a parser that's been battle tested.