WordPress.org

Why would I want to replace the default WordPress filter?

There is nothing fundamentally wrong with the way WordPress filters comments, and in fact there has been no security alert related to this. However, this doesn't detract from the desire to make things better, and the fact that HTML Purifier is much more thorough and exhaustive.

Does this plugin also protect posts?

Not currently, no, but it is planned for a future version