Comment by 1lint

By your argument, everyone using string templating for HTML has bad/nonexistent web security. I disagree.