for safety might wanna use `is.object` so we don't catch Dates and Arrays. I'll admit that's an edge case, but people have sent us weird stuff :P