Calls which aren't in full HTML contexts should call the method to avoid
any HTML.  This includes most loc strings, <option> contents, RSS
elements, and autocomplete results.  Almost any call to ShowUser which
sets NoEscape to a true value should probably be using $User->Format
instead.