I don't think `prepend` should even mark an string html safe. We are changing the behavior and also we may opening a XSS vector.