Per the forums https://forum.omeka.org/t/foreign-language-metadata-markup/4411/2
Even with security settings for HTML turned off, lang attribute is stripped out when importing HTML content. Seems like somewhere the plugin is enforcing some kind of security settings.