Hacker News Reader

Something about injecting HTML from an API, even from a controlled server, feels wrong.

But that’s the point: its not an API, it’s just an app web server.

There’s nothing wrong with a web server serving HTML; that’s their whole purpose.