While YAML has many extraneous features, it is also more user-friendly than JSON.

With respect to the many security vulnerabilities that YAML implementations had in the past: I try to not be paranoid, and most of my YAML files are under my control anyway.