That is a good reason. Is XSLT known for security problems the same way that CGI was?