They could also use print with -P and start using the prompt escape
%F{red}, but that's bypassing the issue rather than handling the
original string.
Yeah, the eval is buried under three nested levels of called
functions, if it was directly on the command line there'd be no
problem.