Add a note on Flask automatic escaping