Agree on lack of ACME but the codebase is far cleaner than nginx. In theory it'd be easier to audit?