BN is nice if someone is paying for it, but has too many limitations especially for the most common use case which is security.

What are the limitations?

No shellcode decoding, no plugin support and rather limited IR.

> No shellcode decoding

Can't speak to this as I don't RE for security purposes, but:

> no plugin support and rather limited IR.

this I'm profoundly confused by. BN has multiple IRs that are easily accessible both in the UI and to scripts. And it certainly has a plugin system too.

Binary Ninja definitely has plugins?