`Object.create(null)` would be safer.