from a security engineer's perspective, these things seem great, but ultimately become really tricky where DOM nodes need to be produced safely. string concaten

from a security engineer's perspective, these things seem great, but ultimately become really tricky where DOM nodes need to be produced safely. string concatenation doesn't cut it for obvious reasons, then you have mXSS from mismatches between the backend server and the browser's interpretation of the HTML