Being able to contextualize your security tooling to the code level is such an underrated capability of an effective security program/team.

It also allows you to leverage open-source tooling much more effectively.

The biggest problem is your setting a bar for capabilities that allot of infosec people don't have, so you need to consider the ability to manage a custom security code base into the future, which can cause issues if it's not considered properly for the environment your doing it in.