So the MakeAPI only sanitizes tags? Or in other words, consumer apps still have to sanitize all other data?