CachedRawValueImpl.string() should use CodingErrorAction.REPLACE rather than IGNORE to avoid security issues