The functions are used in cross-platform code, therefore, we can't use secure ones (unless creating a wrapper which would then call non-secure version for GCC and secure for MSVC). I think the problematic on is snprintf - when we trim the result to the size of buffer, the use of this function is secure enough, IMO.