I hardly believe the basics of bold, italic, underline, lists to name a few is going to be a vulnerability issue. Maybe back in the 90s, yes, I can certainly see adding these basic html tags being an issue, but not today!
I'm not asking for the system to have embeds, JavaScript, PHP etc...