The blog really ought to validating user input, because there are many things worse than unclosed <p>s that can happen if it doesn't.

Of course, "ought to" and "does" are two different things...