So there IS some attempt to sanitize this value, it's just inconsistently applied :)
...maybe I will write that new config system.