How does this protect against bad markup  - is it being escaped in case backend message needs it? Looks like in some case we have no idea what will actually get rendered, how long that text is, how long text will affect UI layout, etc.