Escaping home_url

Apparently this is important, according to WP VIP. It's also how underscores does it: https://github.com/Automattic/_s/blob/master/header.php#L27

Most WP functions escape user input, but I guess not this one.