Is it safe to allow HTML uploads?

For exactly the same reason you wouldn’t want phishing links appearing on a community?

Discourse isn’t a DMS or file storage, why would you use it just to facilitate the download of HTML files, surely code is better housed somewhere like GitHub?