This comment seems to have been overlooked (at least was not responded to).

If lxml is fixed, then from what I can understand of rule S320, it should be removed as well.