~anthropic/claude-sonnet-latest → A (6:4)

Side A fixes a real XSS vulnerability by sanitizing untrusted Reddit HTML before rendering, with a clear, minimal, well-tested implementation (dedicated sanitize module with unit tests). Side B improves reliability of Reddit fetching (forcing OAuth, retry-on-401/403) which is valuable but more narrowly operational/infra-focused and adds significant complexity/duplication in error handling; both are legitimate, but A addresses a security-critical defect with lasting design value.