[zimpenfish]

> then overly cautious and leave a potential problem unaddressed.

I don't think "do even the most cursory verification to check if the extraordinary thing I've just seen is actually happening" could be counted as "overly cautious".

[imwillofficial]

As somebody in the security field tackling this stuff every day, I am happy with the tradeoffs made, and the resolution.