Update TODO entries (remove the use of :sprintf)

This please this is true for list of current modules.
If we have new modules, we may encounter the same issue.
Mark all uses of (vsprintf) *safe*