Note that this is much more dangerous than visiting a website.
Are you being hyperbolic or do you seriously think the attack surface area of ANSI escape sequences is 'much more' than, say, Javascrpt?
Are you being hyperbolic or do you seriously think the attack surface area of ANSI escape sequences is 'much more' than, say, Javascrpt?
I don't know the answer but if telnet can directly access the system that seems more dangerous irrespective of the attack surface.
The ANSI control characters wield power of a huge stack of not very robust code
And, telnet isn't installed by default on many systems. So...YMMV.