Unfortunately, I don't think SDK is referring to C.....
I'm willing to bet they didn't write much for the Lua port. They probably used someone else's Nucleus RTOS code, and just threw in a few specific commands. That means that maybe there will be an exploitable vulnerability....
Of course, I might be wrong, and they might include Asm support, which would mean we wouldn't need such things