You can argue that it shouldn't let them do that, but it currently is intentional.
HTML use enabled
Smilies option ON Smilies lookup table