I suppose sanitize filename could return something special if it didn't find a `%d` but then the function wouldn't really be just sanitizing, it would be validating and sanitizing. The concerns seemed separate to me.