I’ve updated the manual to mention the setting:
https://docs.ankiweb.net/math.html#security-warning
@Danika_Dakika we had some existing code that tried to prohibit malicious LaTeX, but it turned out not to be comprehensive. There are some legitimate use cases for the commands we were blocking, so it didn’t make much sense to continue to block them when we have this new option.
A global toggle is not without its own downsides. There’s a risk users will toggle it accidentally, or enable it, forget about it, and download shared decks months later. But given that it doesn’t seem to be practical to guard against all malicious LaTeX, or invoke LaTeX in a sandbox across all the platforms, I didn’t see many alternative options other than dropping LaTeX completely.