I've been thinking about the right balance for validation. Should I just do a simple checks (check if fields are not undefined, empty strings, etc…), or just plug in Zod.

I will probably go with the latter.