In the comments he admits that public APIs should be defensive, but internal APIs should be 'known good' via testing.