I take that back, it works fine because `serializer.data` is "clean", validated data, so it doesn't contain those. Made a test to prove that.

I didn't want to write it the other way around because I didn't want to have to make `serializer.data` mutable (it's not by default)