You'd have to cover that if you wrote your own library function, though; it's attack surface, but not uniquely so.