Comment by insanitybit

innerText escapes the text, that's the whole point of Trusted Types. Escaping isn't just "needed", it's literally how those features work.