Doesn't active record sanitize input anymore?

[eluser]FinalFrag[/eluser]
I now have the following code in my model

Code:

$name = "this should <b>get</b> ' escaped";

$this->db->set('userId', $userId);
$this->db->set('name', $name);
$this->db->insert('todoLists');

When I execute that, it just gets put in the database like that... unescaped.
So the problem seems to be located in the model :S