Automatic escaping would not work anyways, you need to escape for the appropriate context (HTML, JS, CSS, JSON, XML...). You don't have to use a framework, jus

Automatic escaping would not work anyways, you need to escape for the appropriate context (HTML, JS, CSS, JSON, XML...). You don't have to use a framework, just use one of the many composer packages available like Twig for example...