You could compare it to a messaging protocol. If the message is attempting remote code execution you would want to remove the possibility to do so and/or [perhaps] drop the message.