@alext I’m not sure I agree that this form of coping gracefully counts as a virtue: instead of detecting when something is clearly incorrect in the request and letting the requester know about it, we’re silently throwing those bits of the input away.

That said, I agree we’re fine leaving this until such time as it actually causes us a problem.