[mabbo]

I won't downvote you.

When this terrible thing was done, we immediately realized we needed to add validation. We had thought that by limiting who could call through access controls, we'd never have a malicious user. So naive.

Sadly, at that point we couldn't add it because his awful project was running in production.