In my opinion, Webmin is a bad idea anyway and is an obvious target due to its purpose. It's an unnecessary application (if you have competent sys admins) and flaws will be found in applications of its nature, regardless of what language it's written in.

I understand why people are attracted to it, but they need to understand it's another doorway into their systems. The less doors you have, the less you have to secure.