Similar, yes, but (I might be wrong here) the severity in log4j stems from the fact that interpolation was happening on a logged string, and most users did expe

Similar, yes, but (I might be wrong here) the severity in log4j stems from the fact that interpolation was happening on a logged string, and most users did expect this to be passed through unmodified (i.e. param1 in log.info(param1)). Here, the interpolation happens on a string that is expected to be a template (it's even documented that way), so users would usually be cautious where the template originates from. Recursive interpolation also needs to be enabled explicitly.