check_plain() is not needed on #default_value (ref comment http://drupal.org/node/1706376#comment-6310496