When you create your forums you set whether or not you want html or ubbcode on. It's possible in an read-only forum you might want full control of the html/javascript.
I do not follow you on the security issues thoughts. Believe me, we're the subject of "security testing" on a mostly daily basis
Donate to UBBDev today to help aid in Operational, Server and Script Maintenance, and Development costs.
Please also see our parent organization VNC Web Services if you're in the need of a new UBB.threads Install or Upgrade, Site/Server Migrations, or Security and Coding Services.