Some questions / feedback on this, apologies for the delay:

- Should the exception be raised only if it's an `ActionController::Parameters` or is there a more generic check (e.g., any object; anything `taint`'d; anything not a string) that should be used to catch potentially untrusted / unsanitized parameters from coming through in other forms?
- Is there an option that allows some one to be reckless and disable this check should they so desire?
- Given that there are all kinds of "security" checks that you might want to perform in the future, I'm not sure if the name is better stated in terms of what this check does (feel free to ignore this point as a naming quibble).

This starts to sound the comment @ConradIrwin made earlier re: ActiveModel and rails/strong_parameters