There's no way to trust Token::replace() @return

Problem/Motivation

The parent issue has this for one of the use cases of token::replace (not always):

User-entered strings with markup should mean the return of Token::replace() is Xss::filter()d or explicitly trusted (i.e. marked as safe) and permission-restricted.

Except marked as safe is no longer possible. All the ways to do that is @internal or @deprecated . In my case $text is admin provided and so it can be trusted and all the placeholders are escaped by token anyways:

      $replacements[$token] = $value instanceof MarkupInterface ? $value : new HtmlEscapedText($value);

Proposed resolution

Add a TrustedTokenMarkup domain object? No idea really.

Remaining tasks

User interface changes

API changes

Data model changes