Hacker News Reader

Epub can do all sort of homecalling / user tracking using HTML or CSS or javascript.

What's even worse - almost all Epub readers don't do proper sandboxing.

That is one more reason why it should be supported in browsers where we have better understood ways to control this.

Browsers don't block any homecalling either.