…but I'm not sure I'd go to them for web development.
It is a tiresome fact of web development that you can't trust anything the user enters, and you really must validate input you get from your users. Unfortunately, the message you get from following this link (which I didn't construct–it was on their site) seems to show that they're not doing a very good job of that.
(Not that I've ever been perfect, either, but I try hard.)