[cryptica]

This can happen if handling data from a remote client. Type checking does not happen at runtime so you still need to do your own schema validation even with TypeScript. So IMO it adds almost no value.

[jimmyspice]

in which case your API layer should validate the data at runtime so that it only actually returns type T as it claims. then you are back to soundness