There's still the 25519 curve, whose constants are highly constrained around reasonable criteria. DJB most probably haven't put any backdoor in those.

Plus, as far as big number arithmetic goes, it's relatively easy to implement.