It's considered good practice to validate presence of the association itself (i.e. `:user`) rather than the ID. Simply having an ID present doesn't necessarily mean the ID corresponds to a valid user in the database.