Yeah, that seems fair, actually. And encourage them to just use `req.ip` instead. That's reasonable.

If someone is doing this manually, they should have their own middleware to do this.