And it's kind of ironic that one of the reasons Pleroma doesn't adopt JSON-LD is due to the external entities issue among other broken designs of JSON-LD only to get hit via a worse version right in the XML library that's part of Erlang, even though XML doesn't requires the bad design in question.