I think he is probably referring to these discussions:

- https://github.com/irungentoo/toxcore/issues/121

- https://github.com/irungentoo/toxcore/issues/578

where the devs are quite defensive about their choices to (1) reinvent the wheel (2) use technologies that are (according to the comments) not secure (3) not audit their proposed crypto/security architecture by experts.