For projects that matter, like an OS, or networking tools, I do not trust slop. But this sounds like a recompiler, ROM goes in, native executable comes out, the majority of the code originates from the ROM and unless they were playing extra fast and loose there shouldn’t be too many places for malicious or vulnerable code to hide.

But also, fuck Nintendo, they make Epic look like the EFF.