Thanks this is good info to know!
Just to clarify when I mentioned "including extension functionality into core" I was talking about adding LIEF as a dependency and adding the tables into osquery core
No need to ship/bundle the extension (the added stuff in core would make the extension obsolete)