Guard against `Object.prototype` extensions