I handle bad params in the route handler, but I can add another layer of protection if you think it's worth it.