Added a todo on templatetag security.