But we have to conclude that designing with the ESP32-C3 is still going to be a lot like designing for the ESP8266. I/O is limited. You’ll have to work with that. Situating the ESP-C3 ...

The ESP32 codebase has already been patched against them, but the older ESP8266 SDK has not yet. So as of now, if you’re running an ESP8266 on EAP, you’re vulnerable.

The only other downside is that, without a battery, you'll need to provide continuous power to an ESP32. Many of these can also be replaced with an ESP8266 instead of an ESP32.