HTML-escapes without double-escaping entities. (standard Liquid filter.)
{{ "& <" | escape_once }}
Output:
& <