But of course nobody is talking about universally safe strings. It's just a name to explain the concept.

Point being, if my database API uses the different types than my random internet input types, compiler will force me to convert/parse those.