i still dont see the added security issue.

you define your template inside {% verbatim %} and if you want to preseed your data, you put that into the new {{ variable|json_script }}...

or do you mean that the developer uses a js framework for the main data and keeps using django templates for other, user generated parts (i.e. comments)? that would be a disaster, i agree

btw, the last letter is an 'i' :)