We can move this check to exploitPrevention()