/tag and /blog are in need of a cleanup : there are still capability checks done in tag/lib.php (which should be done in the calling scripts), some code hasn't been adjusted following the (pre-1.9) tag library changes (capabilities not taken into account, not using the api, etc.) and there are quite a few unused variables.