Many other languages (including Ruby and PHP[1]) are also unsafe by default. Searching for yaml.load and yaml.safe_load on GitHub yields 215k and 53k results respectively. Many of those yaml.load()s are fine – loading a config file with yaml.load() is often okay since it’s usually (though not always!) from a ‘trusted source’, and many are from test files with static YAML. But still, one can’t help