Does markdown have security issues, regardless of the fact that it isn't executed? It is a markup language, so by your comment it will.