The generated C code could contain a backdoor. Generated C is not really auditable so there would be no way to tell that the code is compromised.