You can have a safe library that does this and then enforce its usage with a linter or something. Template engines print strings and escape them under the hood.