Bug? I would have expected the title to be [sanitised](https://codex.wordpress.org/Validating_Sanitizing_and_Escaping_User_Data#Sanitizing:_Cleaning_User_Input). Example below.  