Really disappointed in this limitation. I chose Squarespace over other competitors with the understanding Squarespace had good customisation.
I don't see security as being a good justification since users can freely implement scripts.
Having a simple span tag within content should not compromise security.