Comment 17 for bug 1958539

Implemented and released in lxml 5.2.

Thanks for taking over the maintenance of the package, it'll have a better life outside of lxml.
That will make it clearer that it's just one choice amongst several, and one that is not meant for security relevant use cases.