If your threat model includes targeted attacks I'd have serious doubts even about using Curl.