I don't understand why we need to escape this, it's coming from stored Contacts data—shouldn't it already be safe?