[bronson]

I don't even think that's fair. What happens when everyone implements their own pet subset of a standard?

[mercurial]

It's not an hypothetical future, you can often disable dangerous features in XML parsers. It seems sensible to me to do the same with YAML parsers.