What's the security risk with HTML?
 

My site started very small on phpBB in 2004. We were basically a group of about 20 friends that played with a private forum. Over time we grew and moved to vB.

We always had html enabled for embedding Youtube, etc.

I hear that it's a huge security risk but every-time I've tried to disable html over the past year, it breaks a lot of post that have embedded Youtube and other media links.

How can I transition to no html and keep my content unbroken?