If you're using `strong_parameters`, we disallow data structures unless explicitly permitted, and for cases like invalid types, that's where it should stay.