The OGB response contains SafeHTML wrapped values, see discussion here: https://docs.google.com/a/google.com/document/d/1BO0SObCsJHUQdb2PP-4vVYwxdIekJlNooXCLNrdBL58/edit?disco=AAAAA4mZG4o.

We could do the same for the VASCO and promo responses. In doing so we should refactor the custom SafeHTML unwrap functions into a util file, or see if the C++ implementation has been open-sourced.