Smack's Body class is currently overly cautious escaping text within the body element. That is, it uses the XmlEscapeMode.safe, when XmlEscapeMode.forText is sufficent, which does not escape '"'.
This is also true in other places, for example AbstractJsonPacketExtension.