If you can make sure that client code that's using this method can send `params` with only clients data, than maybe you don't need this method at all.