js being a dynamic language on the web, it is much more common to unintentionally perform such an input than a non-js developer might expect. typescript helps, but i have fired some of these footguns even with typescript.