>
"Oh no! Bad actors might abuse this […]
There's no "might" about. This is exactly what happened in the early/beta days of JSON, per Douglas Crockford, creator of JSON:
> I removed comments from JSON because I saw people were using them to hold parsing directives, a practice which would have destroyed interoperability. I know that the lack of comments makes some people sad, but it shouldn't.
* https://web.archive.org/web/20190112173904/https://plus.goog...
* https://archive.today/2015.07.04-102718/https://plus.google....
> […] absolutely necessary feature […]
It's so "absolutely necessary" that JSON has found hardly any success and is struggling to find a use case or a niche… /s
Or it seems that JSON works just fine without comments, especially as a data exchange format, which contradicts that claim that it is "necessary" (absolutely or otherwise).