It fails because Meta uses Tag Icons, and it requires an update to match the core. Without that, the link is not escaped.
I made a PR a while ago: