The agent architecture is clever. Crash isolation for WAF/auth means a buggy plugin cant take down the proxy, which has bitten me with nginx modules before.
Out of curiosity: when the nginx module bit you, was it mainly crashes, memory leaks, or latency spikes under load?