It’s definitely not a solved problem. Most developers absolutely would not escape their outputs if left to their own devices