> Can you just do the same thing with JSON, Yaml, or your favorite serialization method of choice that does not have catastrophic consequences if parsing gets subverted?

Sure. You can even extend the `json` module to serialize custom data types not defined in the JSON spec.