What are the limitations?

No shellcode decoding, no plugin support and rather limited IR.

> No shellcode decoding

Can't speak to this as I don't RE for security purposes, but:

> no plugin support and rather limited IR.

this I'm profoundly confused by. BN has multiple IRs that are easily accessible both in the UI and to scripts. And it certainly has a plugin system too.

Binary Ninja definitely has plugins?