[twhb]

Is it really Perl best practice to assume all non-scalar data types are trusted?

[mirchibajji]

Definitely not. At $work, we use Params::Validate as a standard way to normalise and validate the incoming parameters.