i never enable HTML, except for me the admin.. and by that, i don't mean the admin group either..
i create a 'can use html' group and usually 1 or 2 peeps are in it.
it's not so much a security risk like before, but it isn't really needed either because with custom BBcodes, you can silence those who 'need to be able to post {insert special thingie here}'
all in all, i do it to both prevent n00b html'ers from jacking up the board as well as peace of mind security wise..
:2c: