But when I test something similar, I get
<script type="application/ld+json">
{
"@context" : "http://schema.org",
"@type" : "Webpage",
"name": "My \x26 Company"
}
</script>
Which is valid …
What OS (Windows?) and Hugo version are you using?