Tina's suggestion to not use H::T::C in production wasn't because of security issues, it was because of potential memory issues and lack of a test suite.

well, I said that in september 2005. =)
I had the opportunity to test the module in a bigger system recently, and it behaves pretty well regarding memory usage (so it might go into production there soon). The general test suite is growing, too, and Mark Stosberg is helping me now to fix open bugs and develop features.

but still, if you don't need the speed, and don't need the special features, use HTML::Template. it has much more users, and that sometimes can be better than a test suite. HTC is still in development, so if you use it in production, be sure to have a good test suite yourself.