There may be situations where a mistake is understandable because it was a who-would-have-thought situation, but on this scenario an effort is required to shoot

There may be situations where a mistake is understandable because it was a who-would-have-thought situation, but on this scenario an effort is required to shoot yourself in the foot. Apple can't be seriously using an insecure-by-default templating engine to render HTML. On one of my older projects I'm using a 12 year old framework that already had XSS filtering by default when inserting values.