Build a browser on top of an open standard, neglect that standard, then refer to that neglecting as the reason to kill it. This fits that spiderman pointing at spiderman meme perfectly. It's exhausting.
100%. There are tons of vulnerabilities in JavaScript that are happily patched.
XSLT has a ton of value, especially if we want a more diverse/robust web.