> Mitigating issues you missed thus requires a backfill, which may not be scalable. My understanding of this is that you leave data that is effectively an expl

> Mitigating issues you missed thus requires a backfill, which may not be scalable. My understanding of this is that you leave data that is effectively an exploit in your database, and rely on the rigor of everyone using that data to validate it correctly? Have you had to do this in real life - can you provide an example? I guess I've seen something like "<b>This is bold</b>" rendered after someone has fixed a bug, but I've also seen that rendered as bold text because it wasn't fixed everywhere (which is terrifying to me, knowingly not fixing malicious data).