I'm sure this is just referring to various 'extension headers' in IPSec, which is how the protocol was designed. Sure, poor implementations can lead to problem

I'm sure this is just referring to various 'extension headers' in IPSec, which is how the protocol was designed. Sure, poor implementations can lead to problems, but the same holds true for just about anything.