Why doesn't the article contain proof of either attack in action?

I would be surprised if the second attack worked after what must be at least a couple layers of markdown/html conversion and spam filtering.

disclaimer: work at Google, but far removed from YouTube