Shouldn't we allow users to write HTML?

Say you have a website that allows users to make posts or update data that other users can see. Obviously, if we let them write HTML, there's going to be all sorts of XSS concerns, right? Hello fellow users, I'm just writing to say <script> sendMeAll...