Consider using `Object.getOwnPropertyNames` to prevent getting attacked by leaked prototype overrides.