Hacker News Reader

It’s really not. The point is that sanitizing output is a better way to protect the host and the client.

Sure, keep writing exploitable code then, have fun!

yes, and the article clearly agrees with you, different destinations of the data have different escaping requirements.