That approach only makes sense if trusted inputs are tested