1. I'll update the implementation of `escapeHTML` to use the approach shown in mustache.js, but I'll keep the current behaviour for now (like you said, another bug) 
2. Killing the second argument should be done in the new bug.
3. Not sure if you saw this? https://github.com/mozilla-b2g/gaia/pull/8982#discussion_r3716350