Maybe use `sanitize_text_field()` here instead?