Thanks Bill! Ironically, this came up yesterday in another thread (see here).
I did some testing this morning and posted an issue here related to url encoding. As you suggest above, using {{#urlEncode}}…{{/urlEncode}} is currently the only reliable method for ensuring a querystring is properly encoded.