Well if its on the front end and you have unknown users who may make reviews i would say bb should be fine. I mean, can't you still edit the templates anyways?
Yeah agreed, there is the option approve reviews the review before publishing, so HTML could be acceptable ... but the approver would have to make sure there was no JavaScript hidden in there. The main problem with BBCode is:
1) If a back-end user decides to edit a review then I have to limit them to BBCode as well. If I don't do this then the user would no longer be allowed to edit their review as it could be potentially a mix of HTML and BBCode. Perhaps this can be solved by not allowing users to edit their reviews once they have been approved.
2) If an administrator submits a review from the front-end they would also be limited to BBCode, which they may or may not like.
Hi Row1,
If the reviews are limited to registered and above then BBcode only would be fine (I wouldn't like HTML reviews on an open site)
Plus I'm not sure most of the members on my site would know what to do with HTML 
ThanX for the update and enjoy your holiday.. Anywhere nice?
Kymmy
The HTML would be done via the standard Joomla editor i.e. they wouldn't see the HTML. But I guess it is still a bit dangerous and provides more work for approvers if HTML is allowed.
So far it looks like BBCode will continue to be the way to go - it will make it easier for me.
Just going to Hong Kong for a few days, nothing too exiting

but a lot of things to prepare.