> Likely the same reason a lot of things are iffy on the web: backwards compatibility. You've got large organizations These large organizations, affected by pu

> Likely the same reason a lot of things are iffy on the web: backwards compatibility. You've got large organizations These large organizations, affected by purely hypothetical problems (nobody bothered to check for any real issues, or release a developer version of a fix), are a clear minority compared to the entities affected by the security problem that needs fixing. If that's how all the cruft gets added to HTML by a few people from 2-3 browser vendors, it's no wonder that it looks like it does and increasingly frustrates web developers to the point of resignation.