Could we ever get a poorly formatted (or even malicious) resp here? Also is JSON.parse safe?