Good catch! I didn't realize reddit encodes '&', '<' and '>' when it returns json data:
https://github.com/reddit/reddit/blob/master/r2/r2/controlle...
which ends up in:
https://github.com/reddit/reddit/blob/master/r2/r2/lib/filte...
It should be fixed now :). Thank you for pointing out!