XSS Vulnerability

I see that there is an unescaped instance of add_query_arg() in line 285 of classes/ppc-welcome-class.php.

I know it is following wp_safe_redirect, but doesn’t it still need to be escaped because of this vulnerability?

https://ww.wp.xz.cn/plugins/post-pay-counter/