If we can limit the template resolution to a known set of safe expressions, it wouldn't be a problem. We briefly toyed with the idea of resolving inline javascript expressions (blanking on the exact detail on how much we allowed) which we reverted since that's definitely not safe. Due to bandwidth, we settled with just supporting a fixed number of variables at that time. We do have plans to revisit this in the future.