Sadly yes, but they are trying really hard to make the new experience as close to custom CSS as possible while still maintaining the ability to be creative. Unfortunately it's not really a security problem as much as it is a design problem making things mobile and app friendly.
