I do not serialize Objects so my Stuff is all fine (my network packets are all manually encoded and decoded with the data that they need and nothing else).
I am considering adding a hard dependency on this Mod though, once it is validated to be safe. The reason I think it is unsafe is because it downloads a json file for auto-configuration purposes to stay up to date. Which in on itself might be exploitable, but I am unsure about that.