> There’s entirely too much security surface area to put arbitrary HTML into emails ...

We manage it with browsers though.

Don't get me wrong, I've never liked html in emails to begin with. It's the same issue that markdown and every other rich text system has regarding where to draw the line. HN even strips most emojis (and I think that's a good thing).