Are you comparing their one-person project to nginx? Linux is written in C and out-of-bounds bugs are still found.