100%. There are tons of vulnerabilities in JavaScript that are happily patched.

XSLT has a ton of value, especially if we want a more diverse/robust web.