Why would anybody care about performance more than caring about malicious code being injected?

Very strange way of thinking.