Because using htmx is asking to get defaced via XSS, or worse. Security is an afterthought for the project, which is evident from the placement of the related documentation.
How is this better?
It probably isn’t.
security rules for htmx are no different than any other hypermedia approach: you need to escape all user content