I don't get how this works, isn't `_validate_and_clean_filename` a function?