It should not happen (and if it happens, there *is* a bug in implementation).
So it serves as some internal documentation.
The checks have already been done by callers.